[Git][security-tracker-team/security-tracker][master] Reserve DLA-4875-1 for imagemagick

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a53a56df by Bastien Roucariès at 2026-10-31T22:58:38+01:00
Reserve DLA-4875-1 for imagemagick

- - - - -


3 changed files:

- data/CVE/list
- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -42834,7 +42834,6 @@ CVE-2026-105090 (Formbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS. T
 CVE-2026-105083 (ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vul ...)
 	- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1149969)
 	[trixie] - imagemagick <no-dsa> (Minor issue)
-	[bookworm] - imagemagick <postponed> (Minor issue)
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jjp4-3fwf-393j
 	NOTE: Fixed by: [1/5] https://github.com/ImageMagick/ImageMagick/commit/1926ccf119141c26274c120d1899dffae19b0c71 (7.1.2-32)
 	NOTE: Fixed by: [2/5] https://github.com/ImageMagick/ImageMagick/commit/3cb153f2112a183316769387e52d784b87ce877d (7.1.2-32)


=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[31 Oct 2026] DLA-4875-1 imagemagick - security update
+	{CVE-2026-105081 CVE-2026-105083 CVE-2026-109259 CVE-2026-109260 CVE-2026-109262 CVE-2026-109263 CVE-2026-109264 CVE-2026-109266 CVE-2026-109267 CVE-2026-109268 CVE-2026-109269 CVE-2026-109273 CVE-2026-109275 CVE-2026-109276 CVE-2026-109278 CVE-2026-109279 CVE-2026-109964 CVE-2026-116140 CVE-2026-116143 CVE-2026-116144 CVE-2026-116145 CVE-2026-116146 CVE-2026-116147 CVE-2026-116148 CVE-2026-116149 CVE-2026-116150 CVE-2026-116151 CVE-2026-116154 CVE-2026-116155 CVE-2026-116157 CVE-2026-116159 CVE-2026-116160}
+	[bookworm] - imagemagick 8:6.9.11.60+dfsg-1.6+deb12u15
 [31 Oct 2026] DLA-4874-1 eog - security update
 	{CVE-2026-107651 CVE-2026-118475}
 	[bookworm] - eog 43.2-1+deb12u1


=====================================
data/dla-needed.txt
=====================================
@@ -265,10 +265,6 @@ icinga2
   NOTE: 20260702: Follow DSA and/or support security team with DSA (dleidert/front-desk)
   NOTE: 20260702: also care about outstanding CVEs (dleidert/front-desk)
 --
-imagemagick (rouca)
-  NOTE: 20261009: Added by Front-Desk (rouca)
-  NOTE: 20261026: Made a partial release DLA-4858-1 (rouca)
---
 ironic
   NOTE: 20260610: Added by Front-Desk (rouca)
   NOTE: 20260816: Partial release by maintainer (charles)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a53a56df12d071613c5be1f32e2f081d9d78bf0b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a53a56df12d071613c5be1f32e2f081d9d78bf0b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261031/2388effd/attachment.htm>