[Git][security-tracker-team/security-tracker][master] Reserve DLA-4609-1 for imagemagick

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f19d2f37 by Bastien Roucariès at 2026-05-30T23:46:33+02:00
Reserve DLA-4609-1 for imagemagick

- - - - -


3 changed files:

- data/CVE/list
- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -19459,7 +19459,6 @@ CVE-2025-12993
 CVE-2026-42050 (ImageMagick is free and open-source software used for editing and mani ...)
 	{DSA-6310-1 DSA-6298-1}
 	- imagemagick 8:7.1.2.21+dfsg1-1
-	[bullseye] - imagemagick <postponed> (Minor issue; can be fixed in next update)
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7mxf-ff4f-jj7p
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/25980041f145afc621233a1c050291231b627c48 (7.1.2-20)
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/2b4a06cdb9b5b4b8e51247be8b38ea4cbfdfb07c (6.9.13-45)


=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[30 May 2026] DLA-4609-1 imagemagick - security update
+	{CVE-2026-33901 CVE-2026-42050 CVE-2026-42326 CVE-2026-45031 CVE-2026-45358 CVE-2026-45359 CVE-2026-45624 CVE-2026-45664 CVE-2026-46520 CVE-2026-46521 CVE-2026-46522 CVE-2026-46523 CVE-2026-46559 CVE-2026-46692 CVE-2026-46693 CVE-2026-47165 CVE-2026-47166}
+	[bullseye] - imagemagick 8:6.9.11.60+dfsg-1.3+deb11u13
 [30 May 2026] DLA-4608-1 corosync - security update
 	{CVE-2026-35091 CVE-2026-35092}
 	[bullseye] - corosync 3.1.2-2+deb11u2


=====================================
data/dla-needed.txt
=====================================
@@ -241,10 +241,6 @@ haveged
 hplip (Thorsten Alteholz)
   NOTE: 20260523: Added by maintainer (ta)
 --
-imagemagick (rouca)
-  NOTE: 20260522: Added by Front-Desk (Beuc)
-  NOTE: 20260522: Another batch of CVEs, upcoming DSA (Beuc/front-desk)
---
 jackson-core (Markus Koschany)
   NOTE: 20250707: Added by Front-Desk (apo)
   NOTE: 20251016: A single patch is not possible to apply to fix the CVE. I'm working on backporting more than one.



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f19d2f37b47db6a617760f3856ff0d98502cdc73

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f19d2f37b47db6a617760f3856ff0d98502cdc73
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260530/b04b7086/attachment-0001.htm>