[Git][security-tracker-team/security-tracker][master] new imagemagick issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5e04fb4e by Moritz Muehlenhoff at 2026-10-14T14:15:23+02:00
new imagemagick issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4253,7 +4253,10 @@ CVE-2026-109966 (yt-dlp-web-ui through 4.0.0 contains an argument injection vuln
 CVE-2026-109965 (Serena before 2.0.0 contains an improper link resolution vulnerability ...)
 	NOT-FOR-US: Serena
 CVE-2026-109964 (ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer under ...)
-	TODO: check
+	- imagemagick 8:7.1.2.33+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mqmp-r5jh-jx7w
+	NOTE: https://github.com/ImageMagick/ImageMagick/commit/63dde0cf281383ab69432b88305f7dcd6a8ce900 (7.1.2-33)
+	NOTE: https://github.com/ImageMagick/ImageMagick6/commit/c18c5d5fb7f1d87ddbe0a02e9d1207c89b24588c (6.9.13-58)
 CVE-2026-109963 (Froxlor before 2.3.14 contains an insecure direct object reference vul ...)
 	- froxlor <itp> (bug #581792)
 CVE-2026-109962 (Froxlor 0.10.0 before 2.3.14 contains a missing authorization vulnerab ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5e04fb4e069206065fd0dbd39e540fd66bd34f58

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5e04fb4e069206065fd0dbd39e540fd66bd34f58
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261014/f7ae98a4/attachment.htm>