Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8b841832 by Salvatore Bonaccorso at 2026-07-01T10:21:56+02:00
Add CVE-2026-56377/imagemagick
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -78,7 +78,10 @@ CVE-2026-56413 (Storage Concentrator (SC & SCVM) contains a
command injection vu
CVE-2026-56399 (Open WebUI before 0.6.27 contains a server-side request
forgery vulner ...)
NOT-FOR-US: Open WebUI
CVE-2026-56377 (ImageMagick before 7.1.2-24 contains an incorrect policy check
that al ...)
- TODO: check
+ - imagemagick 8:7.1.2.24+dfsg1-1
+ NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gm48-c7f2-v67p
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/3705205e1424d379c2fc46c026c8560ccea0509e
(7.1.2-24)
+ NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/a2aa44ce71f0950522a104bbd4daa7b8a0b6709c
(6.9.13-49)
CVE-2026-56369 (ImageMagick before 7.1.2-22 contains an information disclosure
vulnera ...)
- imagemagick 8:7.1.2.23+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qv2q-c278-pch5
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8b8418326a909da1b1214dcdebb2f21bc43ea2a7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8b8418326a909da1b1214dcdebb2f21bc43ea2a7
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
