[Git][security-tracker-team/security-tracker][master] CVE-2026-56364/imagemagick
Bastien Roucariès (@rouca)
rouca at debian.org
Sun Jul 12 00:28:30 BST 2026
Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker
Commits:
c612bed1 by Bastien Roucariès at 2026-07-12T01:28:03+02:00
CVE-2026-56364/imagemagick
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -6003,9 +6003,12 @@ CVE-2026-56365 (ImageMagick before 7.1.2-19 contains a memory leak vulnerability
CVE-2026-56364 (ImageMagick before 7.1.2-13 contains a memory leak vulnerability in Lo ...)
{DSA-6383-1}
- imagemagick 8:7.1.2.13+dfsg1-1
+ [bookworm] - imagemagick <not-affected> (vulnerable code introduced later)
+ [bullseye] - imagemagick <not-affected> (vulnerable code introduced later)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qp59-x883-77qv
NOTE: Fixed by [1/2]: https://github.com/ImageMagick/ImageMagick/commit/951f6b0940224afc469f6a72503d6e011c688d02 (7.1.2-13)
NOTE: Fixed by [2/2]: https://github.com/ImageMagick/ImageMagick/commit/5fd4e5ad05a986b00e1519fa308ca3c5cf3d09d8 (7.1.2-14)
+ NOTE: Only imagemagick 7 function LoadOpenCLDeviceBenchmark not present in imagemagick 6
CVE-2026-56363 (ImageMagick before 7.1.2-22 contains a division by zero vulnerability ...)
{DSA-6383-1}
- imagemagick 8:7.1.2.23+dfsg1-1
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c612bed1b320edfaddd67cab54af0d30fcd90015
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c612bed1b320edfaddd67cab54af0d30fcd90015
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260711/4c619515/attachment.htm>
More information about the debian-security-tracker-commits
mailing list