[Git][security-tracker-team/security-tracker][master] CVE-2026-116153/LTS

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8f0b7aed by Bastien Roucariès at 2026-10-30T21:24:00+01:00
CVE-2026-116153/LTS

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -8977,8 +8977,10 @@ CVE-2026-116154 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/41bce657a379675706039b97dffc313806b39d23 (6.9.13-58)
 CVE-2026-116153 (ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerabil ...)
 	- imagemagick 8:7.1.2.33+dfsg1-1
+	[bookworm] - imagemagick <not-affected> (vulnerable code introduced later)
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7438-vh5v-v52h
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/3882fd7116e0794a05457f78da80cd39f83b52c3 (7.1.2-33)
+	NOTE: Introduced by: https://github.com/ImageMagick/ImageMagick/commit/73da9ae83c8a00a469a665722614dfde62ce6a0f (7.0.10-1)
 CVE-2026-116152 (ImageMagick before 7.1.2-33 contains a memory leak vulnerability in th ...)
 	{DSA-6593-1 DLA-4858-1}
 	- imagemagick 8:7.1.2.33+dfsg1-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f0b7aed9a79540b1a96f84bd411ed00b525e16c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f0b7aed9a79540b1a96f84bd411ed00b525e16c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261030/f6576607/attachment.htm>