Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f9dae100 by security tracker role at 2026-10-26T07:14:38+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,109 @@
+CVE-2026-116228 (A vulnerability was found in 777genius agent-teams-ai up to
2.17.10. T ...)
+ TODO: check
+CVE-2026-116227 (A vulnerability has been found in Edimax BR-6208AC 1.32. This
vulnerab ...)
+ TODO: check
+CVE-2026-116224 (A vulnerability has been found in fr0tt benotes up to 2.8.1.
This affe ...)
+ TODO: check
+CVE-2026-116223 (A flaw has been found in icret EasyImage up to 2.8.7. The
impacted ele ...)
+ TODO: check
+CVE-2026-116124 (A security vulnerability has been detected in GNOME libgsf up
to 1.14. ...)
+ TODO: check
+CVE-2026-116123 (A weakness has been identified in NocoDB up to 2026.07.0. The
affected ...)
+ TODO: check
+CVE-2026-116122 (A security flaw has been discovered in NocoDB up to
2026.07.0. Impacte ...)
+ TODO: check
+CVE-2026-116121 (A vulnerability was identified in NocoDB up to 2026.08.0.
This issue a ...)
+ TODO: check
+CVE-2026-116120 (A vulnerability was determined in NocoDB up to 2026.07.0.
This vulnera ...)
+ TODO: check
+CVE-2026-116119 (A vulnerability was found in NocoDB up to 2026.08.0. This
affects an u ...)
+ TODO: check
+CVE-2026-116118 (A vulnerability has been found in Z.ai Zcode up to
3.14.3/3.15.1. Affe ...)
+ TODO: check
+CVE-2026-116117 (A flaw has been found in halo-dev halo up to 2.27.0-beta.1.
Affected b ...)
+ TODO: check
+CVE-2026-116116 (A vulnerability was detected in Yoosee GM8135S Camera
21.00.01.36. Aff ...)
+ TODO: check
+CVE-2026-116115 (A security vulnerability has been detected in Yoosee GM8135S
Camera 21 ...)
+ TODO: check
+CVE-2026-116114 (A weakness has been identified in Yoosee GM8135S Camera
21.00.01.36. T ...)
+ TODO: check
+CVE-2026-116113 (A security flaw has been discovered in GouGuOA up to 6.1.2.
The impact ...)
+ TODO: check
+CVE-2026-116112 (A vulnerability was identified in HashenUdara
edoc-doctor-appointment- ...)
+ TODO: check
+CVE-2026-116111 (A vulnerability was determined in 2K Games Civilization V
1.0.3.144. I ...)
+ TODO: check
+CVE-2026-116110 (A vulnerability was found in GiantappMan LiveWallPaper
2.6.8.0 on Wind ...)
+ TODO: check
+CVE-2026-116109 (A vulnerability has been found in continuedev Continue 2.0.0.
This vul ...)
+ TODO: check
+CVE-2026-116108 (A flaw has been found in openbq-org OpenBB up to 4.7.2/5.0.0.
This aff ...)
+ TODO: check
+CVE-2026-116107 (A vulnerability was detected in Datafeedr Product Sets Plugin
up to 1. ...)
+ TODO: check
+CVE-2026-116106 (A security vulnerability has been detected in HeyCyan App
1.0.103 on A ...)
+ TODO: check
+CVE-2026-116105 (A weakness has been identified in HeyCyan App 1.0.103 on
Android. Affe ...)
+ TODO: check
+CVE-2026-116104 (A security flaw has been discovered in Sony Neural Network
Libraries u ...)
+ TODO: check
+CVE-2026-116103 (A vulnerability was identified in Sony Neural Network
Libraries up to ...)
+ TODO: check
+CVE-2026-116102 (A vulnerability was determined in QuantGeekDev docker-mcp
0.1.0/0.2.0. ...)
+ TODO: check
+CVE-2026-116101 (A vulnerability was found in itsourcecode Online Cake
Ordering System ...)
+ TODO: check
+CVE-2026-116100 (A vulnerability has been found in gougucms up to 4.08.18.
Impacted is ...)
+ TODO: check
+CVE-2026-116099 (A flaw has been found in Fusion Creators Studio SCP
Containment Breach ...)
+ TODO: check
+CVE-2026-116098 (A vulnerability was detected in SteelRaven7 Ravenfield
25407073. This ...)
+ TODO: check
+CVE-2026-116097 (A security vulnerability has been detected in
CloudClassroom-PHP-Proje ...)
+ TODO: check
+CVE-2026-116096 (A weakness has been identified in ggml-org llama.cpp.
Affected by this ...)
+ TODO: check
+CVE-2026-116095 (A vulnerability was identified in smg-project smg
1.7.0/1.8.0/1.9.0/1. ...)
+ TODO: check
+CVE-2026-116094 (A vulnerability was determined in EyouCMS up to 1.8.3. This
impacts th ...)
+ TODO: check
+CVE-2026-115635 (Incorrect Authorization vulnerability in ash-project
ash_postgres allo ...)
+ TODO: check
+CVE-2026-115627 (Incorrect Authorization vulnerability in ash-project
ash_postgres allo ...)
+ TODO: check
+CVE-2026-114214 (Incorrect Authorization vulnerability in ash-project ash
allows a clie ...)
+ TODO: check
+CVE-2026-113345 (Electronic delivery item Inspection Support System provided
by Japan's ...)
+ TODO: check
+CVE-2026-111974 (The GiveWP WordPress plugin before 4.19.0.1 does not restrict
the curr ...)
+ TODO: check
+CVE-2026-107900 (V-SFT provided by FUJI ELECTRIC CO., LTD. contains an
out-of-bounds re ...)
+ TODO: check
+CVE-2026-107899 (V-SFT provided by FUJI ELECTRIC CO., LTD. contains an
out-of-bounds re ...)
+ TODO: check
+CVE-2026-107898 (V-SFT provided by FUJI ELECTRIC CO., LTD. contains an
out-of-bounds re ...)
+ TODO: check
+CVE-2026-107897 (V-SFT provided by FUJI ELECTRIC CO., LTD. contains an
out-of-bounds re ...)
+ TODO: check
+CVE-2026-107896 (V-SFT provided by FUJI ELECTRIC CO., LTD. contains an
out-of-bounds re ...)
+ TODO: check
+CVE-2026-107895 (V-SFT provided by FUJI ELECTRIC CO., LTD. contains an
out-of-bounds wr ...)
+ TODO: check
+CVE-2026-107894 (V-SFT provided by FUJI ELECTRIC CO., LTD. contains a
stack-based buffe ...)
+ TODO: check
+CVE-2026-103381 (The Mintpay for WooCommerce WordPress plugin through 2.2.3
does not ve ...)
+ TODO: check
+CVE-2026-103319 (The OPay Payment Gateway for WooCommerce WordPress plugin
through 2.5. ...)
+ TODO: check
+CVE-2026-103306 (The Online Payments with iK Pay Gateway WordPress plugin
before 3.0.4 ...)
+ TODO: check
+CVE-2026-103300 (The Eurobank WooCommerce Payment Gateway WordPress plugin
through 2.1. ...)
+ TODO: check
+CVE-2026-103299 (The Payment Gateway WordPress plugin through 2.2.0 does not
ensure a ...)
+ TODO: check
+CVE-2026-103298 (The CCAvenue Payment Gateway for WooCommerce WordPress plugin
through ...)
+ TODO: check
CVE-2026-110879
- jackson-databind 2.22.4-1
[trixie] - jackson-databind <not-affected> (Incomplete fix for
CVE-2026-54512 not applied)
@@ -5928,12 +6034,15 @@ CVE-2026-113869 (When Thunderbird asked for a security
device password (for exam
- thunderbird <not-affected> (Only affects Thunderbird post ESR153)
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-114/#CVE-2026-113869
CVE-2026-113868 (When authenticating to a POP3 or SMTP server using NTLM,
Thunderbird d ...)
+ {DSA-6585-1}
- thunderbird 1:153.5.1esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-115/#CVE-2026-113868
CVE-2026-113867 (Thunderbird did not escape attribute values when serializing
outgoing ...)
+ {DSA-6585-1}
- thunderbird 1:153.5.1esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-115/#CVE-2026-113867
CVE-2026-113866 (When setting up an account, Thunderbird's Exchange
AutoDiscover lookup ...)
+ {DSA-6585-1}
- thunderbird 1:153.5.1esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-115/#CVE-2026-113866
CVE-2026-113776 (virtualenv is a tool for creating isolated virtual python
environments ...)
@@ -8979,7 +9088,7 @@ CVE-2026-113400 (Uninitialized memory in the Audio/Video:
cubeb component. This
- firefox 158.0.1-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-111/#CVE-2026-113400
CVE-2026-113470 (Cryptographic issue in the Security Block-lists, Allow-lists,
and othe ...)
- {DSA-6573-1 DLA-4847-1}
+ {DSA-6585-1 DSA-6573-1 DLA-4847-1}
- firefox 158.0.1-1
- firefox-esr 153.5.1esr-1
- thunderbird 1:153.5.1esr-1
@@ -15799,7 +15908,8 @@ CVE-2026-XXXX [BUG/MAJOR: mux-h2: properly handle short
reads on PING frames]
NOTE: Fixed by:
https://git.haproxy.org/?p=haproxy-3.2.git;a=commit;h=dc338d875ec907f18143ee369552658b750b7297
(v3.2.16)
NOTE: Fixed by:
https://git.haproxy.org/?p=haproxy-3.0.git;a=commit;h=560f1019e55838187435f120b562fd66ce880303
(v3.0.30)
NOTE: Fixed by:
https://git.haproxy.org/?p=haproxy-2.6.git;a=commit;h=0914283029749ef172ca0b1063c29999dcf8cd79
(v2.6.35)
-CVE-2026-110354 [BUG/MAJOR: h1-htx: report an error on a too long chunk-size
line]
+CVE-2026-110354 (HAProxy 3 before 3.4.6 allows a remote unauthenticated
attacker to cau ...)
+ {DSA-6570-1 DLA-4842-1}
- haproxy 3.2.26-1
NOTE: Fixed by:
https://git.haproxy.org/?p=haproxy-3.2.git;a=commit;h=a5f625bd1bc433d0d1d44d28f7b0789f79ae60c0
(v3.2.26)
NOTE: Fixed by:
https://git.haproxy.org/?p=haproxy-3.0.git;a=commit;h=fd0864b83920851eeaaa0dd934bfebc82ba6ca27
(v3.0.30)
@@ -21435,6 +21545,7 @@ CVE-2026-11731 (An authentication bypass vulnerability
in the listed NETGEAR RAX
CVE-2026-11730 (Insufficient session randomness vulnerability in the listed
NETGEAR Ex ...)
NOT-FOR-US: Netgear
CVE-2026-110249 (A malicious, compromised, or MITM-controlled Exchange server
can retur ...)
+ {DSA-6585-1}
- thunderbird 1:153.5.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-110249
CVE-2026-110247 (Several buffer-growth sites in libmime performed size
arithmetic in 32 ...)
@@ -22100,7 +22211,7 @@ CVE-2026-109704 (Privilege escalation in the
Application Update component. This
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109704
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109704
CVE-2026-109705 (Sandbox escape, site isolation issue due to incorrect
boundary conditi ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22108,7 +22219,7 @@ CVE-2026-109705 (Sandbox escape, site isolation issue
due to incorrect boundary
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109705
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109705
CVE-2026-109706 (Use-after-free in the Storage: IndexedDB component. This
vulnerability ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22116,7 +22227,7 @@ CVE-2026-109706 (Use-after-free in the Storage:
IndexedDB component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109706
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109706
CVE-2026-109707 (Sandbox escape due to use-after-free in the Networking
component. This ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22124,7 +22235,7 @@ CVE-2026-109707 (Sandbox escape due to use-after-free
in the Networking componen
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109707
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109707
CVE-2026-109708 (Sandbox escape due to incorrect boundary conditions in the
Networking ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22132,7 +22243,7 @@ CVE-2026-109708 (Sandbox escape due to incorrect
boundary conditions in the Netw
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109708
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109708
CVE-2026-109709 (Information disclosure, privilege escalation in the Security:
Process ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22140,7 +22251,7 @@ CVE-2026-109709 (Information disclosure, privilege
escalation in the Security: P
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109709
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109709
CVE-2026-109710 (Use-after-free in the Graphics: Text component. This
vulnerability was ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22148,7 +22259,7 @@ CVE-2026-109710 (Use-after-free in the Graphics: Text
component. This vulnerabil
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109710
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109710
CVE-2026-109711 (Use-after-free in the Graphics: Canvas2D component. This
vulnerability ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22156,7 +22267,7 @@ CVE-2026-109711 (Use-after-free in the Graphics:
Canvas2D component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109711
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109711
CVE-2026-109712 (Sandbox escape due to uninitialized memory in the Graphics
component. ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22164,7 +22275,7 @@ CVE-2026-109712 (Sandbox escape due to uninitialized
memory in the Graphics comp
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109712
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109712
CVE-2026-109713 (Use-after-free in the Crash Reporting component. This
vulnerability wa ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22175,7 +22286,7 @@ CVE-2026-109714 (Incorrect boundary conditions in the
Layout component. This vul
- firefox 158.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109714
CVE-2026-109715 (Incorrect boundary conditions in the JavaScript Engine
component. This ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22183,7 +22294,7 @@ CVE-2026-109715 (Incorrect boundary conditions in the
JavaScript Engine componen
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109715
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109715
CVE-2026-109716 (Incorrect boundary conditions in the JavaScript Engine
component. This ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22191,7 +22302,7 @@ CVE-2026-109716 (Incorrect boundary conditions in the
JavaScript Engine componen
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109716
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109716
CVE-2026-109717 (Use-after-free in the DOM: Bindings (WebIDL) component. This
vulnerabi ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22199,7 +22310,7 @@ CVE-2026-109717 (Use-after-free in the DOM: Bindings
(WebIDL) component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109717
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109717
CVE-2026-109718 (Use-after-free in the XML component. This vulnerability was
fixed in F ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22207,7 +22318,7 @@ CVE-2026-109718 (Use-after-free in the XML component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109718
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109718
CVE-2026-109719 (Race condition, use-after-free in the Graphics: CanvasWebGL
component. ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22215,7 +22326,7 @@ CVE-2026-109719 (Race condition, use-after-free in the
Graphics: CanvasWebGL com
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109719
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109719
CVE-2026-109720 (JIT miscompilation in the JavaScript: WebAssembly component.
This vuln ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22223,7 +22334,7 @@ CVE-2026-109720 (JIT miscompilation in the JavaScript:
WebAssembly component. Th
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109720
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109720
CVE-2026-109721 (Incorrect boundary conditions in the JavaScript Engine: JIT
component. ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22231,7 +22342,7 @@ CVE-2026-109721 (Incorrect boundary conditions in the
JavaScript Engine: JIT com
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109721
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109721
CVE-2026-109722 (JIT miscompilation in the JavaScript Engine: JIT component.
This vulne ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22239,7 +22350,7 @@ CVE-2026-109722 (JIT miscompilation in the JavaScript
Engine: JIT component. Thi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109722
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109722
CVE-2026-109723 (Integer overflow in the Layout: Text and Fonts component.
This vulnera ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22247,7 +22358,7 @@ CVE-2026-109723 (Integer overflow in the Layout: Text
and Fonts component. This
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109723
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109723
CVE-2026-109724 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22255,14 +22366,14 @@ CVE-2026-109724 (Use-after-free in the DOM: Core &
HTML component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109724
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109724
CVE-2026-109725 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109725
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109725
CVE-2026-109726 (Use-after-free in the SVG component. This vulnerability was
fixed in F ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22270,7 +22381,7 @@ CVE-2026-109726 (Use-after-free in the SVG component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109726
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109726
CVE-2026-109727 (Use-after-free in the Audio/Video component. This
vulnerability was fi ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22278,7 +22389,7 @@ CVE-2026-109727 (Use-after-free in the Audio/Video
component. This vulnerability
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109727
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109727
CVE-2026-109728 (Use-after-free in the DOM: Animation component. This
vulnerability was ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22286,7 +22397,7 @@ CVE-2026-109728 (Use-after-free in the DOM: Animation
component. This vulnerabil
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109728
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109728
CVE-2026-109729 (Use-after-free in the JavaScript Engine: JIT component. This
vulnerabi ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22294,7 +22405,7 @@ CVE-2026-109729 (Use-after-free in the JavaScript
Engine: JIT component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109729
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109729
CVE-2026-109730 (Integer overflow in the Graphics component. This
vulnerability was fix ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22302,7 +22413,7 @@ CVE-2026-109730 (Integer overflow in the Graphics
component. This vulnerability
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109730
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109730
CVE-2026-109731 (Incorrect boundary conditions in the Graphics: Canvas2D
component. Thi ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22310,7 +22421,7 @@ CVE-2026-109731 (Incorrect boundary conditions in the
Graphics: Canvas2D compone
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109731
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109731
CVE-2026-109732 (Use-after-free in the DOM: Streams component. This
vulnerability was f ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22318,7 +22429,7 @@ CVE-2026-109732 (Use-after-free in the DOM: Streams
component. This vulnerabilit
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109732
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109732
CVE-2026-109733 (JIT miscompilation in the JavaScript Engine: JIT component.
This vulne ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22326,7 +22437,7 @@ CVE-2026-109733 (JIT miscompilation in the JavaScript
Engine: JIT component. Thi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109733
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109733
CVE-2026-109734 (Mitigation bypass in the DOM: Security component. This
vulnerability w ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22337,7 +22448,7 @@ CVE-2026-109735 (Use-after-free in the DOM: Animation
component. This vulnerabil
- firefox 158.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109735
CVE-2026-109736 (Frame poisoning in the Layout component. This vulnerability
was fixed ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22345,7 +22456,7 @@ CVE-2026-109736 (Frame poisoning in the Layout
component. This vulnerability was
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109736
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109736
CVE-2026-109737 (Mitigation bypass in the Enterprise Policies component. This
vulnerabi ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22353,7 +22464,7 @@ CVE-2026-109737 (Mitigation bypass in the Enterprise
Policies component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109737
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109737
CVE-2026-109738 (Use-after-free in the Audio/Video: Playback component. This
vulnerabil ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22371,7 +22482,7 @@ CVE-2026-109740 (Sandbox escape due to incorrect
boundary conditions in the Widg
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109740
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109740
CVE-2026-109741 (Use-after-free in the Storage: Bucket File System component.
This vuln ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22379,7 +22490,7 @@ CVE-2026-109741 (Use-after-free in the Storage: Bucket
File System component. Th
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109741
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109741
CVE-2026-109742 (Information disclosure in the PDF Viewer component. This
vulnerability ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22387,7 +22498,7 @@ CVE-2026-109742 (Information disclosure in the PDF
Viewer component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109742
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109742
CVE-2026-109743 (Privilege escalation in the Panning and Zooming component.
This vulner ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22395,7 +22506,7 @@ CVE-2026-109743 (Privilege escalation in the Panning
and Zooming component. This
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109743
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109743
CVE-2026-109744 (Other issue in the DOM: File component. This vulnerability
was fixed i ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22403,7 +22514,7 @@ CVE-2026-109744 (Other issue in the DOM: File
component. This vulnerability was
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109744
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109744
CVE-2026-109745 (Sandbox escape due to uninitialized memory in the DOM: Web
Serial comp ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22426,7 +22537,7 @@ CVE-2026-109750 (Site isolation issue in the DOM: Web
Authentication component.
- firefox 158.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109750
CVE-2026-109751 (Information disclosure in the Networking component. This
vulnerability ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22434,7 +22545,7 @@ CVE-2026-109751 (Information disclosure in the
Networking component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109751
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109751
CVE-2026-109752 (Use-after-free in the DOM: Workers component. This
vulnerability was f ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22442,7 +22553,7 @@ CVE-2026-109752 (Use-after-free in the DOM: Workers
component. This vulnerabilit
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109752
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109752
CVE-2026-109753 (Incorrect boundary conditions in the Layout component. This
vulnerabil ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22450,7 +22561,7 @@ CVE-2026-109753 (Incorrect boundary conditions in the
Layout component. This vul
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109753
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109753
CVE-2026-109754 (Incorrect boundary conditions in the DOM: Editor component.
This vulne ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22461,7 +22572,7 @@ CVE-2026-109755 (Sandbox escape in the DOM: Content
Processes component. This vu
- firefox 158.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109755
CVE-2026-109756 (Privilege escalation in the DOM: Navigation component. This
vulnerabil ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22469,7 +22580,7 @@ CVE-2026-109756 (Privilege escalation in the DOM:
Navigation component. This vul
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109756
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109756
CVE-2026-109757 (Sandbox escape due to race condition in the Networking
component. This ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22477,7 +22588,7 @@ CVE-2026-109757 (Sandbox escape due to race condition
in the Networking componen
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109757
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109757
CVE-2026-109759 (Site isolation issue in the Networking component. This
vulnerability w ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22485,7 +22596,7 @@ CVE-2026-109759 (Site isolation issue in the Networking
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109759
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109759
CVE-2026-109760 (Mitigation bypass in the Networking: HTTP component. This
vulnerabilit ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22496,7 +22607,7 @@ CVE-2026-109761 (Use-after-free in the JavaScript:
WebAssembly component. This v
- firefox 158.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109761
CVE-2026-109762 (Incorrect boundary conditions in the SVG component. This
vulnerability ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22504,7 +22615,7 @@ CVE-2026-109762 (Incorrect boundary conditions in the
SVG component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109762
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109762
CVE-2026-109763 (Mitigation bypass in the File Handling component. This
vulnerability w ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22512,7 +22623,7 @@ CVE-2026-109763 (Mitigation bypass in the File Handling
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109763
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109763
CVE-2026-109764 (Mitigation bypass in the Enterprise Policies component. This
vulnerabi ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22520,7 +22631,7 @@ CVE-2026-109764 (Mitigation bypass in the Enterprise
Policies component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109764
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109764
CVE-2026-109765 (Race condition, use-after-free in the Graphics: Text
component. This v ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22528,7 +22639,7 @@ CVE-2026-109765 (Race condition, use-after-free in the
Graphics: Text component.
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109765
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109765
CVE-2026-109766 (Mitigation bypass in the Enterprise Policies component. This
vulnerabi ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22536,7 +22647,7 @@ CVE-2026-109766 (Mitigation bypass in the Enterprise
Policies component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109766
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109766
CVE-2026-109767 (Information disclosure in the Networking component. This
vulnerability ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22550,7 +22661,7 @@ CVE-2026-109769 (Information disclosure in the
Networking: Cache component. This
- firefox 158.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109769
CVE-2026-109770 (Spoofing issue in the DOM: Web Serial component. This
vulnerability wa ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22570,7 +22681,7 @@ CVE-2026-109774 (Invalid pointer, undefined behavior in
the DOM: Notifications c
- firefox 158.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109774
CVE-2026-109775 (Denial-of-service in the WebRTC component. This vulnerability
was fixe ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22578,7 +22689,7 @@ CVE-2026-109775 (Denial-of-service in the WebRTC
component. This vulnerability w
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109775
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109775
CVE-2026-109776 (Race condition in the XPCOM component. This vulnerability was
fixed in ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22586,7 +22697,7 @@ CVE-2026-109776 (Race condition in the XPCOM component.
This vulnerability was f
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109776
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109776
CVE-2026-109777 (Information disclosure in the Storage: IndexedDB component.
This vulne ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22594,7 +22705,7 @@ CVE-2026-109777 (Information disclosure in the Storage:
IndexedDB component. Thi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109777
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109777
CVE-2026-109778 (Privilege escalation in the WebExtensions component. This
vulnerabilit ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -22608,7 +22719,7 @@ CVE-2026-109780 (Mitigation bypass in the DOM: Core &
HTML component. This vulne
- firefox 158.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109780
CVE-2026-109781 (Denial-of-service in the Printing: Output component. This
vulnerabilit ...)
- {DSA-6560-1 DLA-4836-1}
+ {DSA-6585-1 DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- thunderbird 1:153.5.0esr-1
@@ -23821,6 +23932,7 @@ CVE-2026-109262 (ImageMagick before 6.9.13-57 and 7.x
before 7.1.2-32 contains a
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/2eff6be3785d980bb5190244ad432fe6282d29e3
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/a568d698ffb3dd57134fef8e9b64b61f1154a1df
(6.9.13-57)
CVE-2026-109261 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a memory ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w68r-6fmr-cvg4
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/1c7763266cfedc635005a965169bc2ddcc650221
(7.1.2-32)
@@ -28386,16 +28498,19 @@ CVE-2026-107212 (Excelize is a Go language library
for reading and writing Micro
CVE-2026-107211 (Excelize is a Go language library for reading and writing
Microsoft Ex ...)
NOT-FOR-US: Excelize
CVE-2026-107210 (ImageMagick is free and open-source software used for editing
and mani ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3j4w-pvxj-fpjc
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/ae2ed8c81d8fad1f186e7f2bc0837b46a1c7be61
(7.1.2-30)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/7d8e0eb11804a5ce5322ea317dfd3557cded4e7b
(6.9.13-55)
CVE-2026-107209 (ImageMagick is free and open-source software used for editing
and mani ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f2r2-qw7g-3c8x
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/326451aae51ac2dabc99fe66e063de6ec14cf8c8
(7.1.2-30)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/04a4c5b89c034cf2c93bb0a10044332d941b4fa5
(6.9.13-55)
CVE-2026-107208 (ImageMagick is free and open-source software used for editing
and mani ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-27m9-54jx-fgvq
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/907b74817836b4f88e7453f0e95c849a1c5311aa
(7.1.2-30)
@@ -28470,11 +28585,13 @@ CVE-2026-107103 (This vulnerability exists in the ERP
system due to insufficient
CVE-2026-107102 (This vulnerability exists in the ERP system due to improper
validation ...)
NOT-FOR-US: Manacle Technologies Multi-tenant ERP System
CVE-2026-106580 (ImageMagick is free and open-source software used for editing
and mani ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r868-pmwh-fv2c
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/768bdd0dbb9a9ad743b6a6e557126b788b325970
(7.1.2-31)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/ad178e41fce2afa6be2b91fb4e7f41c4c5448117
(6.9.13-56)
CVE-2026-106579 (ImageMagick is free and open-source software used for editing
and mani ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vcjj-32hg-qpx5
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/82f373fedb3425c83a239103ab86f4fa86fd49ac
(7.1.2-31)
@@ -28482,11 +28599,13 @@ CVE-2026-106579 (ImageMagick is free and open-source
software used for editing a
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/ac85c8e0a319b1eaf4c3d05d326605f5bae723d6
(6.9.13-56)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/c54667bfe605ebdc17c23cb70a26dbe00b338222
(6.9.13-56)
CVE-2026-106578 (ImageMagick is free and open-source software used for editing
and mani ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6xf5-c3jx-rp39
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/5d29c094020612dc8fb471b10fc1d1cc6e9e4378
(7.1.2-31)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/bfe0117fd9742b3970383e000978d64e5e04372d
(6.9.13-56)
CVE-2026-106577 (ImageMagick is free and open-source software used for editing
and mani ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5rg6-j44q-q892
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/2ba2edfd04a1ab3d45af4a0dc1e640dde7020192
(7.1.2-31)
@@ -28512,21 +28631,25 @@ CVE-2026-106574 (ImageMagick is free and open-source
software used for editing a
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/c69f54e1c8660e45f2ff83c354bf924a946d9356
(7.1.2-31)
NOTE: Only im7:
https://github.com/ImageMagick/ImageMagick6/issues/479#issuecomment-6398829047
CVE-2026-106573 (ImageMagick is free and open-source software used for editing
and mani ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qr53-hc3p-fc62
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/c311471c4e4978494834c707b417bc033d95cc48
(7.1.2-31)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/49560a1641f72a127e413b9861eca0997fde2b96
(6.9.13-56)
CVE-2026-106572 (ImageMagick is free and open-source software used for editing
and mani ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wxw6-98rj-hjfr
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/19bce64e3667ff0348d559e2526c850f8fbe2b5a
(7.1.2-30)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/0ca580238abba18910cfee0fcc3159621fec0dee
(6.9.13-55)
CVE-2026-106571 (ImageMagick is free and open-source software used for editing
and mani ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jvjm-9f73-fhpq
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/8f3a15e60b723bfe3e80bd1b5e4bee88397467f7
(7.1.2-31)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/91f4ed74a1fd8326ade11a1153de110f22d89aa1
(6.9.13-56)
CVE-2026-106570 (ImageMagick is free and open-source software used for editing
and mani ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150337)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2vwg-3g4g-qprm
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/cafc7372c8113a9636766f0eddde7b90373c9b44
(7.1.2-32)
@@ -28540,21 +28663,25 @@ CVE-2026-106569 (ImageMagick is free and open-source
software used for editing a
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/5ecd5b047cee7ccfe4e14a733a0755c7b2a90c7d
(7.1.2-32)
NOTE: ASE coder introduced in 7.1.2.30
CVE-2026-106568 (ImageMagick is free and open-source software used for editing
and mani ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150337)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9p7q-63hw-mcr4
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/e4f7ad983df6c831832eba3689f96b75f8b67051
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/27e36ca5cb446664bfc284d28d91fced8887b025
(6.9.13-57)
CVE-2026-106567 (ImageMagick is free and open-source software used for editing
and mani ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150337)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g6p6-3ggg-3w7j
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/f053f778409932d55b95758c4b1516b63191d1eb
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/61024a2677a3c7973a2dd27170877d8e51419473
(6.9.13-57)
CVE-2026-106566 (ImageMagick is free and open-source software used for editing
and mani ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150337)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-54hm-vrmh-75qj
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/48e5ce1779fc640a389f0020fd7d965d0c08236e
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/11d2af00a948e9ca2919d9a8684d335a48484094
(6.9.13-57)
CVE-2026-106565 (ImageMagick is free and open-source software used for editing
and mani ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150337)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m9c7-gf3j-hx6h
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/e9872c4a165d869e75d10799c47195725ebf4132
(7.1.2-32)
@@ -39012,6 +39139,7 @@ CVE-2026-102673 (Electron is a framework for writing
cross-platform desktop appl
CVE-2026-102639 (MobilityDB version 1.3.0 and earlier contains an
out-of-bounds read vu ...)
NOT-FOR-US: MobilityDB
CVE-2026-102635 (ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain
uninitializ ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1149974)
[trixie] - imagemagick <no-dsa> (Minor issue)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rvv7-5mh8-vcfc
@@ -39775,14 +39903,14 @@ CVE-2026-100832 (Use-after-free in the Graphics:
Canvas2D component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100832
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100832
CVE-2026-84782 (Issue summary: The DTLS retransmission logic does not
correctly handle ...)
- {DSA-6531-1}
+ {DSA-6531-1 DLA-4859-1}
- openssl 3.6.5-1
NOTE: https://openssl-library.org/news/secadv/20260929.txt
CVE-2026-84783 (Issue summary: The first concurrent use of the same X.509
certificate ...)
- openssl <not-affected> (Vulnerable code not present)
NOTE: https://openssl-library.org/news/secadv/20260929.txt
CVE-2026-35189 (Issue summary: A certificate with many nameRelativeToCRLIssuer
CRL dis ...)
- {DSA-6531-1}
+ {DSA-6531-1 DLA-4859-1}
- openssl 3.6.5-1
NOTE: https://openssl-library.org/news/secadv/20260929.txt
CVE-2026-35191 (Issue summary: The OpenSSL QUIC server, when configured to not
preform ...)
@@ -39796,7 +39924,7 @@ CVE-2026-42772 (Issue summary: The QUIC stream
reassembly algorithm performance
[bookworm] - openssl <not-affected> (Vulnerable code not present)
NOTE: https://openssl-library.org/news/secadv/20260929.txt
CVE-2026-54872 (Issue summary: The generic elliptic-curve scalar
multiplication used f ...)
- {DSA-6531-1}
+ {DSA-6531-1 DLA-4859-1}
- openssl 3.6.5-1
NOTE: https://openssl-library.org/news/secadv/20260929.txt
CVE-2026-54873 (Issue summary: QUIC process may keep memory for QUIC packet
buffer for ...)
@@ -39820,15 +39948,15 @@ CVE-2026-75804 (Issue summary: OpenSSL QUIC stack
does not enforce connection le
[bookworm] - openssl <not-affected> (Vulnerable code not present)
NOTE: https://openssl-library.org/news/secadv/20260929.txt
CVE-2026-75805 (Issue summary: A CMP client that requests certificate
revocation on th ...)
- {DSA-6531-1}
+ {DSA-6531-1 DLA-4859-1}
- openssl 3.6.5-1
NOTE: https://openssl-library.org/news/secadv/20260929.txt
CVE-2026-75806 (Issue summary: An established DTLS 1.2 association using an
AEAD ciphe ...)
- {DSA-6531-1}
+ {DSA-6531-1 DLA-4859-1}
- openssl 3.6.5-1
NOTE: https://openssl-library.org/news/secadv/20260929.txt
CVE-2026-77696 (Issue summary: SM2 signature generation uses non-constant-time
arithme ...)
- {DSA-6531-1}
+ {DSA-6531-1 DLA-4859-1}
- openssl 3.6.5-1
NOTE: https://openssl-library.org/news/secadv/20260929.txt
CVE-2026-84784 (Issue summary: A malicious remote peer may flood the local
QUIC stack ...)
@@ -50689,18 +50817,21 @@ CVE-2026-93590 (ImageMagick before 7.1.2-31 contains
a policy bypass vulnerabili
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/59046410c17e9421f0ad7b4bec478a892cf30c12
(7.1.2-31)
NOTE: UHDR coder introduced in 7.1.2-30
CVE-2026-93589 (ImageMagick before 7.1.2-31 and 6.9.13-56 contains a
division-by-zero ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
[trixie] - imagemagick <no-dsa> (Minor issue)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4gg2-hfgh-6f5c
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/8f620237fe341e814430fe3621b867b0b615f446
(7.1.2-31)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/1e91833e30a88c104276dcfbc01bb68ac4528514
(6.9.13-56)
CVE-2026-93588 (ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a
NULL point ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
[trixie] - imagemagick <no-dsa> (Minor issue)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-92rw-c5mw-27v4
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/c4b3c9039a1509e3e7869331773865b521a62f93
(7.1.2-31)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/3b124bb81d3c53ec7d2b46f5ea04c00c4b07b9b3
(6.9.13-56)
CVE-2026-93587 (ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a
policy byp ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
[trixie] - imagemagick <no-dsa> (Minor issue)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-89wq-f8f6-2j2v
@@ -50709,6 +50840,7 @@ CVE-2026-93587 (ImageMagick before 7.1.2-31 and before
6.9.13-56 contains a poli
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/4332e26659c849bf126aecb215482de1eed73308
(6.9.13-56)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/0d768346a13b63e4d791be4b798482abd1e050d5
(6.9.13-56)
CVE-2026-93586 (ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a
use-after- ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1
[trixie] - imagemagick <no-dsa> (Minor issue)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3rjr-534c-8v67
@@ -71809,18 +71941,21 @@ CVE-2026-86427 (LibreNMS before 26.8.0 contains an
argument injection vulnerabil
CVE-2026-86426 (LibreNMS before 26.8.0 contains an authentication bypass
vulnerability ...)
NOT-FOR-US: LibreNMS
CVE-2026-86425 (ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55
contains a heap ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1 (bug #1147176)
[trixie] - imagemagick <no-dsa> (Minor issue)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-chf5-8rv9-gjqr
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/5bff96a5c8d0b3dafa4ad4fa7916db4cae72a11d
(7.1.2-30)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/e006a69e03f3aff34e9a7af90a0793ec6d879b48
(6.9.13-55)
CVE-2026-86424 (ImageMagick before 7.1.2-30 and 6.9.13-55 contains a
time-of-check-tim ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1 (bug #1147176)
[trixie] - imagemagick <no-dsa> (Minor issue)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9x6f-98x9-rx6g
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/a44ef50cc494253f7d9f0229bb25c064a8e2ae69
(7.1.2-30)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/0b47fb7e3d5650b2be88fd3a8c15096765970ce3
(6.9.13-55)
CVE-2026-86423 (ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55
contains a heap ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1 (bug #1147176)
[trixie] - imagemagick <no-dsa> (Minor issue)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5m9j-96ff-j6qc
@@ -71830,12 +71965,14 @@ CVE-2026-86422 (ImageMagick before 7.1.2-30 contains
a time-of-check-time-of-use
- imagemagick <not-affected> (Only affects ImageMagick on Windows)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-x8g2-7r3w-h44p
CVE-2026-86421 (ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory
leak in th ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1 (bug #1147176)
[trixie] - imagemagick <no-dsa> (Minor issue)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4jv7-q6xw-6f4x
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/c83153dfc128de8e7c538f879c532c7d36a75abb
(7.1.2-30)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/d56cab9f2253373e57c2e77809ab12abbbbdd680
(6.9.13-55)
CVE-2026-86420 (ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly
lower the ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.31+dfsg1-1 (bug #1147176)
[trixie] - imagemagick <no-dsa> (Minor issue)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4mwf-mggw-29vp
@@ -89423,7 +89560,7 @@ CVE-2026-66594 (Subscriber SQL Injection in WordPress
Persistent Login <= 3.1.0
NOT-FOR-US: WordPress plugin or theme
CVE-2026-66593 (Unauthenticated SQL Injection in Security & Malware scan by
CleanTalk ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-66592 (Unauthenticated SQL Injection in rtMedia for WordPress,
BuddyPress and ...)
+CVE-2026-66592 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-66590 (Unauthenticated Cross Site Scripting (XSS) in Tagembed <= 7.4
versions ...)
NOT-FOR-US: WordPress plugin or theme
@@ -116029,6 +116166,7 @@ CVE-2026-67244 (A format string vulnerability was
found in the Notification OAut
CVE-2026-65975 (Pydantic AI is a Python agent framework for building
applications and ...)
NOT-FOR-US: Pydantic AI
CVE-2026-64685 (ImageMagick is free and open-source software used for editing
and mani ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.27+dfsg1-1
[trixie] - imagemagick <no-dsa> (Minor issue)
[bullseye] - imagemagick <postponed> (minor issue)
@@ -116042,6 +116180,7 @@ CVE-2026-63119 (MCP Ruby SDK is the official Ruby SDK
for Model Context Protocol
CVE-2026-63118 (MCP Ruby SDK is the official Ruby SDK for Model Context
Protocol serve ...)
NOT-FOR-US: MCP Ruby SDK
CVE-2026-62946 (ImageMagick is free and open-source software used for editing
and mani ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.27+dfsg1-1
[trixie] - imagemagick <no-dsa> (Minor issue)
[bullseye] - imagemagick <postponed> (minor issue)
@@ -116058,6 +116197,7 @@ CVE-2026-62363 (ImageMagick is free and open-source
software used for editing an
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/0bbf7e48f5dd0ef540d3ae1ae8dfc6cd036fb640
(7.1.2-27)
NOTE: Function introduced by:
https://github.com/ImageMagick/ImageMagick/commit/1c5e6e1b80dacc6c7410ae464da440e6ed3ca5bc
(7.1.0-20)
CVE-2026-62343 (ImageMagick is free and open-source software used for editing
and mani ...)
+ {DLA-4858-1}
- imagemagick 8:7.1.2.26+dfsg1-1
[trixie] - imagemagick <no-dsa> (Minor issue)
[bullseye] - imagemagick <postponed> (minor issue)
@@ -225174,7 +225314,7 @@ CVE-2026-25982 (ImageMagick is free and open-source
software used for editing an
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/b4c37614b6da7695cb4f5b3c6e326a37bdf2b1a9
(6.9.13-39)
NOTE: for imagemagick6 fix in included in a jumbo security patch with
other fix like CVE-2026-25797
CVE-2026-25971 (ImageMagick is free and open-source software used for editing
and mani ...)
- {DSA-6245-1 DSA-6158-1 DLA-4539-1}
+ {DSA-6245-1 DSA-6158-1 DLA-4858-1 DLA-4539-1}
- imagemagick 8:7.1.2.15+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8mpr-6xr2-chhc
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/9313e530b37272b748898febd42b5949756f0179
(7.1.2-14)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f9dae100f017c905b15f69ffa8a19c1cfecceedf
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f9dae100f017c905b15f69ffa8a19c1cfecceedf
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
