[Git][security-tracker-team/security-tracker][master] Track CVEs explicitly considered to affect graphicsmagick by upstream

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d6c896df by Salvatore Bonaccorso at 2026-10-11T16:07:06+02:00
Track CVEs explicitly considered to affect graphicsmagick by upstream

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -107416,6 +107416,7 @@ CVE-2026-61464 (ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based
 	{DLA-4696-1}
 	- imagemagick 8:7.1.2.26+dfsg1-1
 	[trixie] - imagemagick 8:7.1.1.43+dfsg1-1+deb13u12
+	- graphicsmagick 1.4+really1.3.49-1
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-76q6-2p6h-xjqr
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/378bfc12bf7bbc4d9ab081120873efef935ebd85 (7.1.2-26)
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/d0aa5c9e09e0cf5e400309ca76ae886a980b0555 (6.9.13-51)
@@ -126265,6 +126266,7 @@ CVE-2026-56379 (ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command inj
 	[trixie] - imagemagick 8:7.1.1.43+dfsg1-1+deb13u8
 	[bookworm] - imagemagick 8:6.9.11.60+dfsg-1.6+deb12u8
 	[bullseye] - imagemagick 8:6.9.11.60+dfsg-1.3+deb11u11
+	- graphicsmagick 1.4+really1.3.49-1
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xpg8-7m6m-jf56
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/f63c78b3828933f1cc7cf499390248981af765aa (7.1.2-14)
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/9db96365ecab5de69cdec81b9359672b3a827aaa (7.1.2-14)
@@ -274229,6 +274231,7 @@ CVE-2025-55160 (ImageMagick is free and open-source software used for editing an
 CVE-2025-55154 (ImageMagick is free and open-source software used for editing and mani ...)
 	{DSA-5997-1 DLA-4297-1}
 	- imagemagick 8:7.1.2.1+dfsg1-1 (bug #1111103)
+	- graphicsmagick 1.4+really1.3.49-1
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qp29-wxp5-wh82
 	NOTE: https://github.com/ImageMagick/ImageMagick/commit/db986e4782e9f6cc42a0e50151dc4fe43641b337 (7.1.2-1)
 	NOTE: https://github.com/ImageMagick/ImageMagick6/commit/14234b2d3be45af1f71ffafd260532bbd8f81d39 (6.9.13-27)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d6c896df76d1e15cf304647d7bbf0c7b82417388

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d6c896df76d1e15cf304647d7bbf0c7b82417388
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261011/01f7e827/attachment.htm>