[Git][security-tracker-team/security-tracker][master] Add first set of imagemagick issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f2f64124 by Salvatore Bonaccorso at 2026-10-25T21:08:09+01:00
Add first set of imagemagick issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -112,15 +112,28 @@ CVE-2026-116162 (Parse Server before 8.6.104 and 9.0.0 before 9.10.5-alpha.5 sav
 CVE-2026-116161 (Parse Server before 8.6.103 and 9.0.0 before 9.10.5-alpha.4 contains a ...)
 	NOT-FOR-US: Parse Server
 CVE-2026-116160 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-b ...)
-	TODO: check
+	- imagemagick 8:7.1.2.33+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6p6q-wfrv-ffhh
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/09b961e05cdb7caeb923e1736caa340ac26c84ea (7.1.2-33)
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/26c52536a73ae1056f97de62823e1ce7cafb27dc (6.9.13-58)
 CVE-2026-116159 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory ...)
-	TODO: check
+	- imagemagick 8:7.1.2.33+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-c2qq-jqw7-q4mx
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/68168e6e5617e4cc478452777586e408f542362b (7.1.2-33)
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/31c2db9159943c15c55b6afa17c352f45f41652f (6.9.13-58)
 CVE-2026-116158 (ImageMagick before 7.1.2-33 contains a memory leak vulnerability in th ...)
-	TODO: check
+	- imagemagick 8:7.1.2.33+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m938-565c-h9qf
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/8980924dff771df8286cd5311ba0d2c9ef1902ca (7.1.2-33)
 CVE-2026-116157 (ImageMagick before 7.1.2-33 contains a memory leak vulnerability in Pe ...)
-	TODO: check
+	- imagemagick 8:7.1.2.33+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pj4h-g4pf-66v3
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/eef3af56fbc2dc607e185b8565d695a8d8032d73 (7.1.2-33)
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/fb8842ff7ab351cd85a253c780fbfcf1199d7e4c (7.1.2-33)
 CVE-2026-116156 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory ...)
-	TODO: check
+	- imagemagick 8:7.1.2.33+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7r5g-p7ff-jgcp
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/9108482a07ca08620021853a14133b9bc6e77054 (7.1.2-33)
 CVE-2026-116155 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory ...)
 	TODO: check
 CVE-2026-116154 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f2f641240a4476db1352716a28773bb5f8b3fd38

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f2f641240a4476db1352716a28773bb5f8b3fd38
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261025/f6d96881/attachment-0001.htm>