[Git][security-tracker-team/security-tracker][master] DLA-4858-1 imagemagick
Bastien Roucariès (@rouca)
rouca at debian.org
Sun Oct 25 23:20:38 GMT 2026
Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker
Commits:
1a031bff by Bastien Roucariès at 2026-10-26T00:20:15+01:00
DLA-4858-1 imagemagick
- - - - -
2 changed files:
- data/CVE/list
- data/DLA/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -39001,7 +39001,6 @@ CVE-2026-102639 (MobilityDB version 1.3.0 and earlier contains an out-of-bounds
CVE-2026-102635 (ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitializ ...)
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1149974)
[trixie] - imagemagick <no-dsa> (Minor issue)
- [bookworm] - imagemagick <postponed> (Minor issue)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rvv7-5mh8-vcfc
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/a0ca2c739c0216ff4efbd631d1ba7fd54dba1ff4 (7.1.2-32)
NOTE: Revert: https://github.com/ImageMagick/ImageMagick/commit/a0ca2c739c0216ff4efbd631d1ba7fd54dba1ff4 (7.1.2-32)
@@ -50679,21 +50678,18 @@ CVE-2026-93590 (ImageMagick before 7.1.2-31 contains a policy bypass vulnerabili
CVE-2026-93589 (ImageMagick before 7.1.2-31 and 6.9.13-56 contains a division-by-zero ...)
- imagemagick 8:7.1.2.31+dfsg1-1
[trixie] - imagemagick <no-dsa> (Minor issue)
- [bookworm] - imagemagick <postponed> (Minor issue)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4gg2-hfgh-6f5c
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/8f620237fe341e814430fe3621b867b0b615f446 (7.1.2-31)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/1e91833e30a88c104276dcfbc01bb68ac4528514 (6.9.13-56)
CVE-2026-93588 (ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a NULL point ...)
- imagemagick 8:7.1.2.31+dfsg1-1
[trixie] - imagemagick <no-dsa> (Minor issue)
- [bookworm] - imagemagick <postponed> (Minor issue)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-92rw-c5mw-27v4
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/c4b3c9039a1509e3e7869331773865b521a62f93 (7.1.2-31)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/3b124bb81d3c53ec7d2b46f5ea04c00c4b07b9b3 (6.9.13-56)
CVE-2026-93587 (ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a policy byp ...)
- imagemagick 8:7.1.2.31+dfsg1-1
[trixie] - imagemagick <no-dsa> (Minor issue)
- [bookworm] - imagemagick <postponed> (Minor issue)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-89wq-f8f6-2j2v
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/d779ac52f92c3045ced59362b483bee25a3fc784 (7.1.2-31)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/b5da5eac006bae77c587a7c238e346c90ea52acd (7.1.2-31)
@@ -50702,7 +50698,6 @@ CVE-2026-93587 (ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a poli
CVE-2026-93586 (ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a use-after- ...)
- imagemagick 8:7.1.2.31+dfsg1-1
[trixie] - imagemagick <no-dsa> (Minor issue)
- [bookworm] - imagemagick <postponed> (Minor issue)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3rjr-534c-8v67
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/282f455de5c80a7a0d1a713087db9c8fce344141 (7.1.2-31)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/4fe31106f41fa114945ceaf93226fb151ada0d19 (7.1.2-31)
@@ -71803,21 +71798,18 @@ CVE-2026-86426 (LibreNMS before 26.8.0 contains an authentication bypass vulnera
CVE-2026-86425 (ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap ...)
- imagemagick 8:7.1.2.31+dfsg1-1 (bug #1147176)
[trixie] - imagemagick <no-dsa> (Minor issue)
- [bookworm] - imagemagick <postponed> (Minor issue)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-chf5-8rv9-gjqr
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/5bff96a5c8d0b3dafa4ad4fa7916db4cae72a11d (7.1.2-30)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/e006a69e03f3aff34e9a7af90a0793ec6d879b48 (6.9.13-55)
CVE-2026-86424 (ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-tim ...)
- imagemagick 8:7.1.2.31+dfsg1-1 (bug #1147176)
[trixie] - imagemagick <no-dsa> (Minor issue)
- [bookworm] - imagemagick <postponed> (Minor issue)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9x6f-98x9-rx6g
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/a44ef50cc494253f7d9f0229bb25c064a8e2ae69 (7.1.2-30)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/0b47fb7e3d5650b2be88fd3a8c15096765970ce3 (6.9.13-55)
CVE-2026-86423 (ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap ...)
- imagemagick 8:7.1.2.31+dfsg1-1 (bug #1147176)
[trixie] - imagemagick <no-dsa> (Minor issue)
- [bookworm] - imagemagick <postponed> (Minor issue)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5m9j-96ff-j6qc
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/1d3e98913f6a8fa34b5a4180eadb9ed195b918a8 (7.1.2-30)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/ed44f0ba6e2ab57983a6d030c868d009514dc470 (6.9.13-55)
@@ -71827,14 +71819,12 @@ CVE-2026-86422 (ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use
CVE-2026-86421 (ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in th ...)
- imagemagick 8:7.1.2.31+dfsg1-1 (bug #1147176)
[trixie] - imagemagick <no-dsa> (Minor issue)
- [bookworm] - imagemagick <postponed> (Minor issue)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4jv7-q6xw-6f4x
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/c83153dfc128de8e7c538f879c532c7d36a75abb (7.1.2-30)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/d56cab9f2253373e57c2e77809ab12abbbbdd680 (6.9.13-55)
CVE-2026-86420 (ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the ...)
- imagemagick 8:7.1.2.31+dfsg1-1 (bug #1147176)
[trixie] - imagemagick <no-dsa> (Minor issue)
- [bookworm] - imagemagick <postponed> (Minor issue)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4mwf-mggw-29vp
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/6ac07556a93b2de00c845cd535ca256f45a47154 (7.1.2-30)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/29f17f3fe5008fc56f00c1fbc96adf46169db245 (6.9.13-55)
@@ -116028,7 +116018,6 @@ CVE-2026-65975 (Pydantic AI is a Python agent framework for building application
CVE-2026-64685 (ImageMagick is free and open-source software used for editing and mani ...)
- imagemagick 8:7.1.2.27+dfsg1-1
[trixie] - imagemagick <no-dsa> (Minor issue)
- [bookworm] - imagemagick <postponed> (minor issue)
[bullseye] - imagemagick <postponed> (minor issue)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7rgw-xg25-prjm
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/093f476e985d61557ea75ad0ef30d491dff816f3 (7.1.2-27)
@@ -116042,7 +116031,6 @@ CVE-2026-63118 (MCP Ruby SDK is the official Ruby SDK for Model Context Protocol
CVE-2026-62946 (ImageMagick is free and open-source software used for editing and mani ...)
- imagemagick 8:7.1.2.27+dfsg1-1
[trixie] - imagemagick <no-dsa> (Minor issue)
- [bookworm] - imagemagick <postponed> (minor issue)
[bullseye] - imagemagick <postponed> (minor issue)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h22j-f9xw-xjjm
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/538ad18f3a421d1dd9629baa747eebc137c32b67 (7.1.2-27)
@@ -116059,7 +116047,6 @@ CVE-2026-62363 (ImageMagick is free and open-source software used for editing an
CVE-2026-62343 (ImageMagick is free and open-source software used for editing and mani ...)
- imagemagick 8:7.1.2.26+dfsg1-1
[trixie] - imagemagick <no-dsa> (Minor issue)
- [bookworm] - imagemagick <postponed> (minor issue)
[bullseye] - imagemagick <postponed> (minor issue)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f5m7-cqgw-8hm7
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/9acf93f66b0f8495fa222e1a27c3db534cd78864 (7.1.2-26)
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[26 Oct 2026] DLA-4858-1 imagemagick - security update
+ {CVE-2026-25971 CVE-2026-62343 CVE-2026-62946 CVE-2026-64685 CVE-2026-86420 CVE-2026-86421 CVE-2026-86423 CVE-2026-86424 CVE-2026-86425 CVE-2026-93586 CVE-2026-93587 CVE-2026-93588 CVE-2026-93589 CVE-2026-102635 CVE-2026-106565 CVE-2026-106566 CVE-2026-106567 CVE-2026-106568 CVE-2026-106570 CVE-2026-106571 CVE-2026-106572 CVE-2026-106573 CVE-2026-106577 CVE-2026-106578 CVE-2026-106579 CVE-2026-106580 CVE-2026-107208 CVE-2026-107209 CVE-2026-107210 CVE-2026-109261}
+ [bookworm] - imagemagick 8:6.9.11.60+dfsg-1.6+deb12u14
[24 Oct 2026] DLA-4857-1 caddy - security update
{CVE-2026-27585 CVE-2026-27587 CVE-2026-27588 CVE-2026-27589 CVE-2026-27590 CVE-2026-45692 CVE-2026-52845 CVE-2026-52846 CVE-2026-77281}
[bookworm] - caddy 2.6.2-5+deb12u1
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1a031bffe77f4f55d843b2a263d81a7077993678
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1a031bffe77f4f55d843b2a263d81a7077993678
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261025/2779ad61/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list