Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8745bcfa by Salvatore Bonaccorso at 2026-02-26T15:01:41+01:00
Add two new imagemagick issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -123,9 +123,15 @@ CVE-2026-27804 (Parse Server is an open source backend
that can be deployed to a
CVE-2026-27800 (Zed, a code editor, has a Zip Slip (Path Traversal)
vulnerability exis ...)
- zed-editor <itp> (bug #1076165)
CVE-2026-27799 (ImageMagick is free and open-source software used for editing
and mani ...)
- TODO: check
+ - imagemagick <unfixed>
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r99p-5442-q2x2
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/e87695b3227978ad70b967b8d054baaf8ac2cced
(7.1.2-14)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/958ca384aa84ca48fbe3af07bb8d1708ab4d6143
(6.9.13-39)
CVE-2026-27798 (ImageMagick is free and open-source software used for editing
and mani ...)
- TODO: check
+ - imagemagick <unfixed>
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qpgx-jfcq-r59f
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/0377e60b3c0d766bd7271221c95d9ee54f6a3738
(7.1.2-14)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/59edeec2b2adf2ca37454d622f3bca2a61893146
(6.9.13-39)
CVE-2026-27735 (Model Context Protocol Servers is a collection of reference
implementa ...)
TODO: check
CVE-2026-27711 (NanaZip is an open source file archive. Starting in version
5.0.1252.0 ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8745bcfa7dd89e6c0c7ddc2d77378d3cdc3c7123
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8745bcfa7dd89e6c0c7ddc2d77378d3cdc3c7123
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
