[Git][security-tracker-team/security-tracker][master] Add more ImageMagick updates, all duplicates

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9095db97 by Salvatore Bonaccorso at 2026-10-09T09:33:47+02:00
Add more ImageMagick updates, all duplicates

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -739,15 +739,25 @@ CVE-2026-105829 (League CommonMark from 1.3.0 before 2.10.2 contains a cross-sit
 CVE-2026-105828 (Parse Server 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1-alpha.12 cont ...)
 	NOT-FOR-US: Parse Server
 CVE-2026-105827 (ImageMagick before 7.1.2-30 and 6.9.13-55 contains an uncontrolled rec ...)
-	TODO: check
+	- imagemagick 8:7.1.2.31+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wxw6-98rj-hjfr
+	TODO: Duplicte of CVE-2026-106572, report to VulnCheck CNA for rejection
 CVE-2026-105826 (ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a securi ...)
-	TODO: check
+	- imagemagick 8:7.1.2.31+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3j4w-pvxj-fpjc
+	TODO: Duplicate of CVE-2026-107210, report to VulnCheck CNA for rejection
 CVE-2026-105825 (ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a denial ...)
-	TODO: check
+	- imagemagick 8:7.1.2.31+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-27m9-54jx-fgvq
+	TODO: Duplicate of CVE-2026-107208, report to VulnCheck CNA for rejection
 CVE-2026-105824 (ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a use-af ...)
-	TODO: check
+	- imagemagick 8:7.1.2.31+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f2r2-qw7g-3c8x
+	TODO: Duplicate of CVE-2026-107209, report to VulnCheck CNA for rejection
 CVE-2026-105823 (ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 lacks a security  ...)
-	TODO: check
+	- imagemagick 8:7.1.2.31+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r868-pmwh-fv2c
+	TODO: Duplicate of CVE-2026-106580, report to VulnCheck CNA for rejection
 CVE-2026-105674 (TP-Link Tapo C325WB V2 generates the pre-shared key used by its local  ...)
 	NOT-FOR-US: TPLink
 CVE-2026-105673 (An unauthenticated denial-of-service vulnerability exists in Tapo C325 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9095db97391ac7ef9a079a394f067779ad827113

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9095db97391ac7ef9a079a394f067779ad827113
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261009/9e4c5d82/attachment.htm>