[Git][security-tracker-team/security-tracker][master] CVE-2026-105083

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
542d641b by Bastien Roucariès at 2026-10-28T23:13:18+01:00
CVE-2026-105083

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -39110,10 +39110,14 @@ CVE-2026-105083 (ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy byp
 	[trixie] - imagemagick <no-dsa> (Minor issue)
 	[bookworm] - imagemagick <postponed> (Minor issue)
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jjp4-3fwf-393j
-	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/1926ccf119141c26274c120d1899dffae19b0c71 (7.1.2-32)
-	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/399d4bd3b081f44c7fef78153f65e8cdebed9f1a (7.1.2-32)
+	NOTE: Fixed by: [1/5] https://github.com/ImageMagick/ImageMagick/commit/1926ccf119141c26274c120d1899dffae19b0c71 (7.1.2-32)
+	NOTE: Fixed by: [2/5] https://github.com/ImageMagick/ImageMagick/commit/3cb153f2112a183316769387e52d784b87ce877d (7.1.2-32)
+	NOTE: Fixed by: [3/5] https://github.com/ImageMagick/ImageMagick/commit/08328d8343e441a073d1b56e0e4ebac2c02fac28 (7.1.2-32)
+	NOTE: Fixed by: [4/5] https://github.com/ImageMagick/ImageMagick/commit/399d4bd3b081f44c7fef78153f65e8cdebed9f1a (7.1.2-32)
+	NOTE: Fixed by: [5/5] https://github.com/ImageMagick/ImageMagick/commit/b3b8c0a45c55d680d36ba9189b9b74320f75fd68 (7.1.2-32)
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/da6022b2efe6cce8a2fd8f9e51188a45a3b9d558 (6.9.13-57)
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/402ebc5353e569234908962cbdf451531ff66a57 (6.9.13-57)
+	NOTE: Incomplete see CVE-2026-105083
 CVE-2026-105080 (In ConvertX before 0.19.0, converters/calibre.ts does not block recipe ...)
 	NOT-FOR-US: ConvertX
 CVE-2026-105051 (Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor pr ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/542d641bcb0ae0c1ea35d67fe45121fc1210269b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/542d641bcb0ae0c1ea35d67fe45121fc1210269b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261028/b282be92/attachment-0001.htm>