[Git][security-tracker-team/security-tracker][master] Add CVE-2026-42050/imagemagick

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
223ab8e2 by Salvatore Bonaccorso at 2026-05-01T23:22:08+02:00
Add CVE-2026-42050/imagemagick

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,8 @@
+CVE-2026-42050 [Stack buffer overflow in XTileImage]
+	- imagemagick 8:7.1.2.21+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7mxf-ff4f-jj7p
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/25980041f145afc621233a1c050291231b627c48 (7.1.2-20)
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/2b4a06cdb9b5b4b8e51247be8b38ea4cbfdfb07c (6.9.13-45)
 CVE-2026-7591 (A security flaw has been discovered in TimBroddin astro-mcp-server up  ...)
 	NOT-FOR-US: TimBroddin astro-mcp-server
 CVE-2026-7590 (A vulnerability was identified in eyal-gor p_69_branch_monkey_mcp up t ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/223ab8e2cb4bbf33910c0f7d9ef57fbc5b69dcd0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/223ab8e2cb4bbf33910c0f7d9ef57fbc5b69dcd0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260501/dccb4f26/attachment.htm>