[Git][security-tracker-team/security-tracker][master] Add another batch of imagemagick issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a080f0cc by Salvatore Bonaccorso at 2026-10-07T22:18:25+02:00
Add another batch of imagemagick issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -333,17 +333,34 @@ CVE-2026-106570 (ImageMagick is free and open-source software used for editing a
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2vwg-3g4g-qprm
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/cafc7372c8113a9636766f0eddde7b90373c9b44 (7.1.2-32)
 CVE-2026-106569 (ImageMagick is free and open-source software used for editing and mani ...)
-	TODO: check
+	- imagemagick <unfixed>
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gwj6-pm7x-3r63
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/0691546106f4c7e8857da9f21a0e4a8f41915388 (7.1.2-32)
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/5ecd5b047cee7ccfe4e14a733a0755c7b2a90c7d (7.1.2-32)
 CVE-2026-106568 (ImageMagick is free and open-source software used for editing and mani ...)
-	TODO: check
+	- imagemagick <unfixed>
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9p7q-63hw-mcr4
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/e4f7ad983df6c831832eba3689f96b75f8b67051 (7.1.2-32)
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/27e36ca5cb446664bfc284d28d91fced8887b025 (6.9.13-57)
 CVE-2026-106567 (ImageMagick is free and open-source software used for editing and mani ...)
-	TODO: check
+	- imagemagick <unfixed>
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g6p6-3ggg-3w7j
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/f053f778409932d55b95758c4b1516b63191d1eb (7.1.2-32)
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/61024a2677a3c7973a2dd27170877d8e51419473 (6.9.13-57)
 CVE-2026-106566 (ImageMagick is free and open-source software used for editing and mani ...)
-	TODO: check
+	- imagemagick <unfixed>
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-54hm-vrmh-75qj
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/48e5ce1779fc640a389f0020fd7d965d0c08236e (7.1.2-32)
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/11d2af00a948e9ca2919d9a8684d335a48484094 (6.9.13-57)
 CVE-2026-106565 (ImageMagick is free and open-source software used for editing and mani ...)
-	TODO: check
+	- imagemagick <unfixed>
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m9c7-gf3j-hx6h
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/e9872c4a165d869e75d10799c47195725ebf4132 (7.1.2-32)
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/82f752927a552cbba1213b1d023b85e76845774c (6.9.13-57)
 CVE-2026-106564 (ImageMagick is free and open-source software used for editing and mani ...)
-	TODO: check
+	- imagemagick <unfixed>
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-54rx-5x9g-g465
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/f7437ebafcd92d6959eca4086d80b150d52bdb7c (7.1.2-32)
 CVE-2026-106563 (Backstage is an open framework for building developer portals. Prior t ...)
 	NOT-FOR-US: Backstage
 CVE-2026-106562 (Backstage is an open framework for building developer portals. Prior t ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a080f0cce7ffc9ab3711416d686e106b55b18f98

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a080f0cce7ffc9ab3711416d686e106b55b18f98
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261007/734b9eb4/attachment.htm>