[Git][security-tracker-team/security-tracker][master] Add some new imagemagick issues, but they are all duplicates

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Oct 9 08:28:16 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
be3f9aa2 by Salvatore Bonaccorso at 2026-10-09T09:27:51+02:00
Add some new imagemagick issues, but they are all duplicates

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -761,21 +761,37 @@ CVE-2026-105452 (Docker Sandboxes could forward a client-supplied credential alo
 CVE-2026-105436 (Deserialization of Untrusted Data vulnerability in MainWP MainWP Child ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-105405 (ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains an inval ...)
-	TODO: check
+	- imagemagick 8:7.1.2.31+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6xf5-c3jx-rp39
+	TODO: Duplicate of CVE-2026-106578, report to VulnCheck CNA for rejection
 CVE-2026-105404 (ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a code i ...)
-	TODO: check
+	- imagemagick 8:7.1.2.31+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5rg6-j44q-q892
+	TODO: Duplicate of CVE-2026-106577, report to VulnCheck CNA for rejection
 CVE-2026-105403 (ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 allows a security ...)
-	TODO: check
+	- imagemagick 8:7.1.2.31+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vcjj-32hg-qpx5
+	TODO: Duplicate of CVE-2026-106579, report to VulnCheck CNA for rejection
 CVE-2026-105402 (ImageMagick before 7.1.2-31 contains a denial of service vulnerability ...)
-	TODO: check
+	- imagemagick 8:7.1.2.31+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v45j-x8p4-3mh4
+	TODO: Duplicate of CVE-2026-106576, report to VulnCheck CNA for rejection
 CVE-2026-105401 (ImageMagick before 7.1.2-31 contains a heap buffer overflow vulnerabil ...)
-	TODO: check
+	- imagemagick 8:7.1.2.31+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4fq9-vrx7-gv92
+	TODO: Duplicate of CVE-2026-106574, report to VulnCheck CNA for rejection
 CVE-2026-105400 (ImageMagick before 7.1.2-31 contains a resource leak vulnerability tha ...)
-	TODO: check
+	- imagemagick 8:7.1.2.31+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2w4h-697j-4vrm
+	TODO: Duplicate of CVE-2026-106575, report to VulnCheck CNA for rejection
 CVE-2026-105399 (ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a denial ...)
-	TODO: check
+	- imagemagick 8:7.1.2.31+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qr53-hc3p-fc62
+	TODO: Duplicate of CVE-2026-106573, report to VulnCheck CNA for rejection
 CVE-2026-105398 (ImageMagick before 7.1.2-31 contains a heap buffer overflow vulnerabil ...)
-	TODO: check
+	- imagemagick 8:7.1.2.31+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jvjm-9f73-fhpq
+	TODO: Duplicate of CVE-2026-106571, report to VulnCheck CNA for rejection
 CVE-2026-105331 (Local privilege escalation in Checkmk 2.5.0 before 2.5.0p10 allows a u ...)
 	NOT-FOR-US: Checkmk
 CVE-2026-105275 (Satel Netco Design versions prior to v2.1.7 contains a relative path t ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/be3f9aa29097a9cbc28a2a4ab58e70b144072bf1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/be3f9aa29097a9cbc28a2a4ab58e70b144072bf1
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261009/792239ba/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list