[Git][security-tracker-team/security-tracker][master] bugnums
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Tue Oct 13 14:19:34 BST 2026
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
b772e7b7 by Moritz Muehlenhoff at 2026-10-13T15:19:09+02:00
bugnums
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -685,7 +685,7 @@ CVE-2020-37280 (cbor-sync through 1.0.4 contains a resource exhaustion vulnerabi
CVE-2020-37279 (easy-pdf-merge 0.1.0 through 0.2.6 contains an OS command injection vu ...)
TODO: check
CVE-2026-103658 (GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a ...)
- - aspell <unfixed>
+ - aspell <unfixed> (bug #1150801)
[trixie] - aspell <no-dsa> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2550001
NOTE: https://github.com/GNUAspell/aspell/security/advisories/GHSA-p35p-2mw5-fj5j
@@ -1055,121 +1055,121 @@ CVE-2026-109284 (Open WebUI from 0.11.0 before 0.11.4 contains an improper autho
CVE-2026-109283 (Open WebUI from 0.11.1 before 0.11.4 contains an authorization bypass ...)
NOT-FOR-US: Open WebUI
CVE-2026-109282 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type c ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8xmr-6q99-c4x8
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/af7b85012e62fa65393277790b96c56a98d882b6 (7.1.2-32)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/a17cfd15af1038e3ef179016b41ad88e936b4487 (6.9.13-57)
CVE-2026-109281 (ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cvgp-q487-j22w
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/0e82a4d0b294581186ed7b3e1dce59c858a73dba (7.1.2-32)
CVE-2026-109280 (ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnera ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v2x3-wpmg-c4w6
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/fb743d60700c9bc350c3d2a0b48b998bdabc466c (7.1.2-32)
CVE-2026-109279 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper sync ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8x3v-wr32-qqh4
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/12db6f04e895deae4537ead10c771a244607794a (7.1.2-32)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/9ddc71abea5cbe7d18164fa0f0077a105cab514f (6.9.13-57)
CVE-2026-109278 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9f9w-84g3-vp2c
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/15892fc0dc050a3693e28a214478a8d8488d648c (7.1.2-32)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/0d2544e641848462e8b469c06cde69d7d77c35c6 (6.9.13-57)
CVE-2026-109277 (ImageMagick before 7.1.2-32 contains a policy bypass vulnerability in ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vv56-wmgw-m36w
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/ce92ae07c2ca2c20c131eaf6da6da734c1cafce0 (7.1.2-32)
CVE-2026-109276 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an incom ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f983-243h-9x4r
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/b2d579d20cc503185b6e8b0bc2dfb520b7bce58a (7.1.2-32)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/3875281ca0c5aa67b2bf0454725abf177c706b3b (6.9.13-57)
CVE-2026-109275 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code i ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-233r-2p53-wqf5
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/6cfb8d8c65bb0aba49903589b444f45ea074a226 (7.1.2-32)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/c9e9c3a84945d698e8c4e849ec858dc914397181 (6.9.13-57)
CVE-2026-109274 (ImageMagick before 7.1.2-32 contains a time-of-check time-of-use symli ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7q74-r26w-fwcx
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/9e789499e67dbf5c4ee9fe1b72690738c799ec73 (7.1.2-32)
CVE-2026-109273 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an infor ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5j8x-vq8c-vrp9
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/5a5c2e51948fcc5d85b8d832938e2c1b4db4a699 (7.1.2-32)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/a32215ba7a193f2bc896ba6ed4be4013cc06e22b (6.9.13-57)
CVE-2026-109272 (ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereferen ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-58h4-rwr6-wj72
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/d98509b23a547d9ccd0a8af8650d03c5c01c3722 (7.1.2-32)
CVE-2026-109271 (ImageMagick 7.1.2-30 before 7.1.2-32 contains a use after free vulnera ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vxwm-jfjc-3r4x
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/48c49d0cc2b72970b762e0d3263f6c35ab35a7b4 (7.1.2-32)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/2ed1b96b9bc71434f0c4e82e3c63fec029c684c6 (7.1.2-32)
CVE-2026-109270 (ImageMagick before 7.1.2-32 contains a memory leak vulnerability in th ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f32c-2v6j-wvh5
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/da4cfd78a2ceea4cf54207834f9d60c1b9c38797 (7.1.2-32)
CVE-2026-109269 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an infor ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xxrx-rjp3-27rj
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/aa104ff2e408bea23828e7a7a346f9080da4104b (7.1.2-32)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/acf52477cf05c5ff9c8315d44043589a5190a408 (6.9.13-57)
CVE-2026-109268 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use af ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j39j-wmxg-j8mv
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/3285d692ebf200e9cbeff59d1ccc00caab99ad54 (7.1.2-32)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/966e227a1a8b520ea1652e2eb3ca78b08d3206f5 (6.9.13-57)
CVE-2026-109267 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-462x-739v-qvq2
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/507aee2308046b25e251d0be1a5371327bb79683 (7.1.2-32)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/c10823904b251d07fe79346a7136b0af295d451b (6.9.13-57)
CVE-2026-109266 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an XML i ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3429-f84m-8qhw
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/45bb7328b36c163234f5ccb7f1d494b7c4c8c775 (7.1.2-32)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/30499e67801ee8a0e70817d28b861b8616d72555 (6.9.13-57)
CVE-2026-109265 (ImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer over-read v ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jph3-37cg-79wg
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/7605c7619da77a5ff1ccf4ec159f3ec782c6bda7 (7.1.2-32)
CVE-2026-109264 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains uncontro ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pmqj-84pr-qc7c
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/6ff963c14ccb5fefb4eb8654c8b0219033df2b20 (7.1.2-32)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/d4f06dcca7ad99d639af85bc347ad9fdfdcec8e2 (6.9.13-57)
CVE-2026-109263 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-69jx-j2x2-g5w4
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/493fab0b6072787e929184761b6ab6405a9486a2 (7.1.2-32)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/3e2075fe4a148ce33e7d749a99898e55a6cad7b5 (6.9.13-57)
CVE-2026-109262 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w288-jj5x-hhvp
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/2eff6be3785d980bb5190244ad432fe6282d29e3 (7.1.2-32)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/a568d698ffb3dd57134fef8e9b64b61f1154a1df (6.9.13-57)
CVE-2026-109261 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w68r-6fmr-cvg4
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/1c7763266cfedc635005a965169bc2ddcc650221 (7.1.2-32)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/93aa075f0fa5a6ae6a83a63acc7c84283aa6d31b (6.9.13-57)
CVE-2026-109260 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hvwf-wmm6-hvc3
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/fd1b9c85f2634e34034d39016ed7542ac0a19930 (7.1.2-32)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/55346382cebdf5c5fa6c544a7df7ae4910ffb090 (6.9.13-57)
CVE-2026-109259 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an unini ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h499-883p-vph8
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/df199b79f0a1c87ca009e431f03cb387af160f77 (7.1.2-32)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/8e809498fd328256612ee9c0ff7941bd452a0285 (7.1.2-32)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/9c7c5f9f5fcc9e23f0a8fda830cecfbb3310fbd9 (6.9.13-57)
CVE-2026-109258 (ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free v ...)
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #1150802)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pv8x-gq6w-gp4r
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/8caa6a0c62a3ac1f81b19a2ee929fbfe46ee0323 (7.1.2-32)
CVE-2026-109239 (Crawl4AI before 0.9.4 contains a blind server-side request forgery vul ...)
@@ -1780,7 +1780,7 @@ CVE-2026-108981 (ngx_cache_purge before 3.0.4 can allow file deletion via a syml
CVE-2026-108980 (Blinko through 1.8.8 allows directory traversal, overwriting startup f ...)
NOT-FOR-US: Blinko
CVE-2026-108978 (Heap-based buffer overflow vulnerability in Samsung Opensource rlottie ...)
- - rlottie <unfixed>
+ - rlottie <unfixed> (bug #1150772)
[trixie] - rlottie <no-dsa> (Minor issue)
NOTE: https://github.com/Samsung/rlottie/pull/609/
CVE-2026-108976 (GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command inje ...)
@@ -3549,7 +3549,7 @@ CVE-2026-108125 (Improper neutralization of special elements used in an SQL comm
CVE-2026-108124 (Improper neutralization of special elements used in an SQL command ('S ...)
NOT-FOR-US: wp-post-author
CVE-2026-108119 (A flaw was found in busybox. The tar applet's deferred link-creation h ...)
- - busybox <unfixed>
+ - busybox <unfixed> (bug #1150771)
[trixie] - busybox <no-dsa> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2548611
CVE-2026-108113 (ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file uploa ...)
@@ -14812,7 +14812,7 @@ CVE-2026-19553 (ssl.SSLContext.wrap_bio() didn't require the server_hostname arg
- python3.13 <unfixed>
[trixie] - python3.13 <no-dsa> (Minor issue)
- python3.11 <removed>
- - pypy3 <unfixed>
+ - pypy3 <unfixed> (bug #1150803)
[trixie] - pypy3 <no-dsa> (Minor issue)
[bookworm] - pypy3 <postponed> (Minor issue)
NOTE: https://github.com/python/cpython/issues/156793
@@ -15126,7 +15126,7 @@ CVE-2026-19445 (A remote, unauthenticated TLS client can make a server crash or
- python3.13 <unfixed>
[trixie] - python3.13 <no-dsa> (Minor issue)
- python3.11 <removed>
- - pypy3 <unfixed>
+ - pypy3 <unfixed> (bug #1150805)
[trixie] - pypy3 <no-dsa> (Minor issue)
[bookworm] - pypy3 <postponed> (Minor issue)
NOTE: https://github.com/python/cpython/issues/156293
@@ -15519,12 +15519,12 @@ CVE-2026-102843 (A security flaw has been discovered in gedelumbung HospitalMana
CVE-2026-102842 (A vulnerability was identified in gedelumbung HospitalManagement up to ...)
NOT-FOR-US: gedelumbung HospitalManagement
CVE-2026-102805 (A flaw has been found in Nothings stb up to 1.16. This affects the fun ...)
- - libstb <unfixed>
+ - libstb <unfixed> (bug #1150800)
[trixie] - libstb <postponed> (Minor issue, revisit when fixed upstream)
[bookworm] - libstb <postponed> (Minor issue, revisit when fixed upstream)
NOTE: https://github.com/nothings/stb/issues/1964
CVE-2026-102804 (A vulnerability was detected in Nothings stb up to 2c980bb59875b0d3214 ...)
- - libstb <unfixed>
+ - libstb <unfixed> (bug #1150773)
[trixie] - libstb <postponed> (Minor issue, revisit when fixed upstream)
[bookworm] - libstb <postponed> (Minor issue, revisit when fixed upstream)
NOTE: https://github.com/nothings/stb/issues/1961
@@ -15931,7 +15931,7 @@ CVE-2026-12345 (The cleanup of tempfile.TemporaryDirectory is vulnerable to a ra
- python3.13 <unfixed>
[trixie] - python3.13 <no-dsa> (Minor issue)
- python3.11 <removed>
- - pypy3 <unfixed>
+ - pypy3 <unfixed> (bug #1150804)
[trixie] - pypy3 <no-dsa> (Minor issue)
[bookworm] - pypy3 <postponed> (Minor issue)
NOTE: https://github.com/python/cpython/issues/157579
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b772e7b7bcdd9abf60f3424dc0bebc52d6983737
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b772e7b7bcdd9abf60f3424dc0bebc52d6983737
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261013/a864485a/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list