[Git][security-tracker-team/security-tracker][master] Add CVE-2025-62171/imagemagick

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5dbdbd1d by Salvatore Bonaccorso at 2025-10-17T22:58:30+02:00
Add CVE-2025-62171/imagemagick

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -21,7 +21,10 @@ CVE-2025-62356 (A path traversal vulnerability in all versions of the Qodo Qodo
 CVE-2025-62353 (A path traversal vulnerability in all versions of the Windsurf IDE ena ...)
 	NOT-FOR-US: Windsurf IDE
 CVE-2025-62171 (ImageMagick is an open source software suite for displaying, convertin ...)
-	TODO: check
+	- imagemagick <unfixed>
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9pp9-cfwx-54rm
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/cea1693e2ded51b4cc91c70c54096cbed1691c00 (7.1.2-7)
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/456771fae8baa9558a1421ec8d522e6937d9b2d7 (6.9.13-32)
 CVE-2025-62168 (Squid is a caching proxy for the Web. In Squid versions prior to 7.2,  ...)
 	- squid <unfixed>
 	NOTE: https://github.com/squid-cache/squid/security/advisories/GHSA-c8cc-phh7-xmxr



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5dbdbd1d44a9369061f85efca1b7a72a5b7304cf

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5dbdbd1d44a9369061f85efca1b7a72a5b7304cf
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251017/9e1364ad/attachment.htm>