[Git][security-tracker-team/security-tracker][master] GHSA-83w9-w85j-h9jc is CVE-2026-116152 fixed by DLA-4858-1

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
36f475a9 by Bastien Roucariès at 2026-10-29T23:11:10+01:00
GHSA-83w9-w85j-h9jc is CVE-2026-116152 fixed by DLA-4858-1

changelog mention GHSA but CVE was not yet affected

- - - - -


2 changed files:

- data/CVE/list
- data/DLA/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7538,7 +7538,7 @@ CVE-2026-116153 (ImageMagick before 7.1.2-33 contains a heap buffer overflow vul
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7438-vh5v-v52h
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/3882fd7116e0794a05457f78da80cd39f83b52c3 (7.1.2-33)
 CVE-2026-116152 (ImageMagick before 7.1.2-33 contains a memory leak vulnerability in th ...)
-	{DSA-6593-1}
+	{DSA-6593-1 DLA-4858-1}
 	- imagemagick 8:7.1.2.33+dfsg1-1
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-83w9-w85j-h9jc
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/62c7876c37347dee0be1872e623650ba59f8a541 (7.1.2-33)


=====================================
data/DLA/list
=====================================
@@ -29,7 +29,7 @@
 	{CVE-2026-35189 CVE-2026-54872 CVE-2026-75805 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782}
 	[bookworm] - openssl 3.0.22-1~deb12u2
 [26 Oct 2026] DLA-4858-1 imagemagick - security update
-	{CVE-2026-25971 CVE-2026-62343 CVE-2026-62946 CVE-2026-64685 CVE-2026-86420 CVE-2026-86421 CVE-2026-86423 CVE-2026-86424 CVE-2026-86425 CVE-2026-93586 CVE-2026-93587 CVE-2026-93588 CVE-2026-93589 CVE-2026-102635 CVE-2026-106565 CVE-2026-106566 CVE-2026-106567 CVE-2026-106568 CVE-2026-106570 CVE-2026-106571 CVE-2026-106572 CVE-2026-106573 CVE-2026-106577 CVE-2026-106578 CVE-2026-106579 CVE-2026-106580 CVE-2026-107208 CVE-2026-107209 CVE-2026-107210 CVE-2026-109261}
+	{CVE-2026-25971 CVE-2026-62343 CVE-2026-62946 CVE-2026-64685 CVE-2026-86420 CVE-2026-86421 CVE-2026-86423 CVE-2026-86424 CVE-2026-86425 CVE-2026-93586 CVE-2026-93587 CVE-2026-93588 CVE-2026-93589 CVE-2026-102635 CVE-2026-106565 CVE-2026-106566 CVE-2026-106567 CVE-2026-106568 CVE-2026-106570 CVE-2026-106571 CVE-2026-106572 CVE-2026-106573 CVE-2026-106577 CVE-2026-106578 CVE-2026-106579 CVE-2026-106580 CVE-2026-107208 CVE-2026-107209 CVE-2026-107210 CVE-2026-109261 CVE-2026-116152}
 	[bookworm] - imagemagick 8:6.9.11.60+dfsg-1.6+deb12u14
 [24 Oct 2026] DLA-4857-1 caddy - security update
 	{CVE-2026-27585 CVE-2026-27587 CVE-2026-27588 CVE-2026-27589 CVE-2026-27590 CVE-2026-45692 CVE-2026-52845 CVE-2026-52846 CVE-2026-77281}



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/36f475a945cd0ef612a1e211200594df1e8fea05

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/36f475a945cd0ef612a1e211200594df1e8fea05
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261029/9a376714/attachment-0001.htm>