[Git][security-tracker-team/security-tracker][master] Add more imagemagick issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fcd62063 by Salvatore Bonaccorso at 2026-10-25T21:21:02+01:00
Add more imagemagick issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -135,17 +135,34 @@ CVE-2026-116156 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7r5g-p7ff-jgcp
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/9108482a07ca08620021853a14133b9bc6e77054 (7.1.2-33)
 CVE-2026-116155 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory ...)
-	TODO: check
+	- imagemagick 8:7.1.2.33+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5jf2-9gcp-q234
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/d8d635ecc52aec6553d96dcf5ca34cab81293a17 (7.1.2-33)
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/29876f3e3febec4a9806ed5936a66f18971ce319 (6.9.13-58)
 CVE-2026-116154 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory ...)
-	TODO: check
+	- imagemagick 8:7.1.2.33+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8ghq-p369-g395
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/33d16f3cf4e0439bba4a874e14c5a3168726ed68 (7.1.2-33)
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/41bce657a379675706039b97dffc313806b39d23 (6.9.13-58)
 CVE-2026-116153 (ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerabil ...)
-	TODO: check
+	- imagemagick 8:7.1.2.33+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7438-vh5v-v52h
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/3882fd7116e0794a05457f78da80cd39f83b52c3 (7.1.2-33)
 CVE-2026-116152 (ImageMagick before 7.1.2-33 contains a memory leak vulnerability in th ...)
-	TODO: check
+	- imagemagick 8:7.1.2.33+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-83w9-w85j-h9jc
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/62c7876c37347dee0be1872e623650ba59f8a541 (7.1.2-33)
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/af510e976301c2516aaa26ea8f88318450eeece2 (7.1.2-33)
 CVE-2026-116151 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory ...)
-	TODO: check
+	- imagemagick 8:7.1.2.33+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v9q4-cm37-q2jm
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/b41a6bc92ac778e0459ce500e9d64fb361e29fd5 (7.1.2-33)
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/25166220935dc564e7b98f418e3c417a70063a26 (6.9.13-58)
 CVE-2026-116150 (ImageMagick before 7.1.2-33 contains a memory leak vulnerability in th ...)
-	TODO: check
+	- imagemagick 8:7.1.2.33+dfsg1-1
+	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8w9c-hj38-8pf9
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/a63bdd29ebe8439d1bfa51ca4e7890b8b4742560 (7.1.2-33)
+	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/f4454af87ec1be4d6a7f4590c55c1accab779b92 (6.9.13-58)
 CVE-2026-116149 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack- ...)
 	TODO: check
 CVE-2026-116148 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains an injec ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fcd62063f77cedcde4239bb60e323f498d8c1474

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fcd62063f77cedcde4239bb60e323f498d8c1474
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261025/a9de14b8/attachment.htm>