Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ef4b0444 by Salvatore Bonaccorso at 2026-07-11T21:57:50+02:00
Add one imagemagick issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -54,7 +54,9 @@ CVE-2026-57827 (The Joomla extension RSFiles is vulnerable to
an unauthenticated
CVE-2026-56763 (Hono before 4.12.7 allows __proto__ key in parseBody with dot
option e ...)
NOT-FOR-US: Hono
CVE-2026-56372 (ImageMagick before 7.1.2-19 contains a heap buffer overflow
vulnerabil ...)
- TODO: check
+ - imagemagick 8:7.1.2.19+dfsg1-1
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8vfj-q2cp-5m5j
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/8f6b59383ce65d839ad3e2aa578d5d7a7dd1d0ec
(7.1.2-19)
CVE-2026-56303 (Capgo before 12.128.2 contains an information disclosure
vulnerability ...)
NOT-FOR-US: Cap-go
CVE-2026-56296 (Cap-go before 12.128.2 contains an information disclosure
vulnerabilit ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ef4b04443432b0add017ff4f074559c78d72cdbf
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ef4b04443432b0add017ff4f074559c78d72cdbf
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
