Sync Collecting Fix Commits: Mon Jul 20 15:13:45 UTC 2026

Signed-off-by: AboutCode Automation <automation@aboutcode.org>

Author: aboutcode-automation

data/fix-commits/advisory-database-b78f1d41.json

@@ -1,6 +1,12 @@
 {
   "vcs_url": "https://gitweb.gentoo.org/repo/gentoo.git",
   "vulnerabilities": {
+    "CVE-2026-55199": {
+      "d1523c24e93735ca5a8e3f19d987ac56b05f1249": "net-libs/libssh2: fix CVE-2026-55199 too\n\n* Add CVE-2026-55199 fix\n* Rebase CVE-2026-7598 patch\n\nJust git mv as the additional fix is simple.\n\nBug: https://bugs.gentoo.org/977961\nThanks-to: Kerin Millar <kfm@plushkava.net>\nSigned-off-by: Sam James <sam@gentoo.org>"
+    },
+    "CVE-2026-7598": {
+      "d1523c24e93735ca5a8e3f19d987ac56b05f1249": "net-libs/libssh2: fix CVE-2026-55199 too\n\n* Add CVE-2026-55199 fix\n* Rebase CVE-2026-7598 patch\n\nJust git mv as the additional fix is simple.\n\nBug: https://bugs.gentoo.org/977961\nThanks-to: Kerin Millar <kfm@plushkava.net>\nSigned-off-by: Sam James <sam@gentoo.org>"
+    },
     "CVE-2026-11625": {
       "7208e9e86f37e37c0bbefe0cb63652ee4a85596f": "dev-perl/Bytes-Random-Secure: fix CVE-2026-11625\n\n- apply patch for CVE-2026-11625\n- update EAPI 7 -> 8\n- fix MissingVersionedVirtualPerlDependency\n\nBug: https://bugs.gentoo.org/979426\nSigned-off-by: Brett A C Sheffield <bacs@librecast.net>\nPart-of: https://codeberg.org/gentoo/gentoo//pulls/1451\nMerges: https://codeberg.org/gentoo/gentoo//pulls/1451\nSigned-off-by: Sam James <sam@gentoo.org>"
     },

data/fix-commits/common-dd5d765c.json

@@ -1,6 +1,9 @@
 {
   "vcs_url": "https://github.com/imagemagick/imagemagick",
   "vulnerabilities": {
+    "GHSA-6RVV-36HW-5RGF": {
+      "297c894d33956fbbba9e573ebe5647d7f5aec76b": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6rvv-36hw-5rgf"
+    },
     "GHSA-CVHV-G4RQ-3HMW": {
       "e3e69118c29064e2716ca89aab635ea95a15dd49": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cvhv-g4rq-3hmw"
     },

data/fix-commits/gentoo.git-f7ec53e2.json

@@ -1,6 +1,9 @@
 {
   "vcs_url": "https://github.com/imagemagick/imagemagick6",
   "vulnerabilities": {
+    "GHSA-6RVV-36HW-5RGF": {
+      "6729ffd68494337c537f6a7e63922ed0a7f59b58": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6rvv-36hw-5rgf"
+    },
     "GHSA-82MP-VP5C-9PF7": {
       "f48a0e2bad74c4cd42624e95205c3befd64062d8": "Added patches for https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-82mp-vp5c-9pf7."
     },

data/fix-commits/git-e83ef8ed.json

@@ -1,6 +1,9 @@
 {
   "vcs_url": "https://github.com/quarkusio/quarkus",
   "vulnerabilities": {
+    "CVE-2026-59889": {
+      "9e1d6d2db1a683b694da37ec14b73b565ae4b566": "[3.33] bump Jackson BOM to 2.21.5\n\nCVE-2026-59889 is only fixed in 2.21.5, we should bump Jackson version.\nI do not imply that Quarkus is affected, but ideally we would silence scanners in Keycloak https://github.com/keycloak/keycloak/issues/50955.\n\nSigned-off-by: Michal Vav\u0159\u00edk <dev@michalvavrik.net>"
+    },
     "GHSA-QCXP-GM7M-4J5V": {
       "f4433061d2931576cbbf920877dc6ce4a0d92a4c": "Handle GHSA-qcxp-gm7m-4j5v",
       "447b66d4dbf7f26a2bba0b55067104f8e0e60b05": "Handle GHSA-qcxp-gm7m-4j5v",