Multiple vulnerabilities (CVE-2026-42050 et al.) in ImageMagick could lead to denial of service, information disclosure, or arbitrary code execution when processing malformed images. CVE-2026-42050 has a CVSS 3.1 score of 5.5 (MEDIUM). Affected versions are ImageMagick prior to 6.9.13-46 and versions 7.0.0-0 through 7.1.2-20; the fixed versions are 6.9.13-46 and 7.1.2-21.
[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index] [SECURITY] [DSA 6298-1] imagemagick security update To: debian-security-announce@lists.debian.org Subject: [SECURITY] [DSA 6298-1] imagemagick security update From: Moritz Muehlenhoff <jmm@debian.org> Date: Tue, 26 May 2026 20:34:08 +0000 Message-id: <[🔎] ahYDwEgUqyVymF8Q@seger.debian.org> Reply-to: debian-security-announce-request@lists.debian.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6298-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff May 26, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : imagemagick CVE ID : CVE-2026-42050 CVE-2026-42326 CVE-2026-45031 CVE-2026-45358 CVE-2026-45359 CVE-2026-45624 CVE-2026-45664 CVE-2026-46520 CVE-2026-46521 CVE-2026-46522 CVE-2026-46523 CVE-2026-46557 CVE-2026-46559 CVE-2026-46692 CVE-2026-46693 CVE-2026-47165 CVE-2026-47166 Multiple security vulnerabilities were discovered in imagemagick, a software suite used for editing and manipulating digital images, which could lead to denial of service, information disclosure or potentially arbitrary code execution if malformed images are processed. For the stable distribution (trixie), these problems have been fixed in version 8:7.1.1.43+dfsg1-1+deb13u9. We recommend that you upgrade your imagemagick packages. For the detailed security status of imagemagick please refer to its security tracker page at: https://security-tracker.debian.org/tracker/imagemagick Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmoWA4oACgkQEMKTtsN8 Tjb5+g/+KNpTuFre59rEOeDMlWpbhZILQkTo5BgYcLsBjAcceqf1/BV8hhFX34nz msacs0tunvMS9WM4WYvAV6RxNIyeFZOW2v8UY1ZMBV2kKJ6ZresMGycNXCIPhbRS mvZ/gXn8OuJh3h0PttgvsaVdUhOHKbyNnJ24PiLi6pSh27fzzLb/IOqMI7SN2RMq R0gxIL9k4GSHNerE5p3pwoLVye44rxyQx9YLWGLJyJvuCWjgly7OGxb8LUEbtgFb bWyM3xQk11mLoB7XyNNtnysycV0SOPpaI/8un+nfBTP7dRneYpBUAo5K7ap4AWYZ crOT4IuQ81esvZvot6+OKt3mJIpAqLNW7IwO6zGkUHUPiOt0Y8fA31tofveCORM7 sOmqb1rvJX5nRR8H9TmdByiGjkpf39RyigDuxbITDnQZ1XmtvZA5Up/6CfyNkoI9 1DzgeRgJq6vZ8Lyz/riaoSZOdn569LS5jQQ9yck2JM6nGF9zLOP36rCtwzwh1UiL Z/DSZoWTFug8nnfEs0BJhgBuQsjVmQ3JbB5X5JzBk0Ssg/XY2gonQAvkRca8cN05 QIj+K9sO+/KfHH0JfY9tLBgDz1HuSCkDNBl51JdqTdZTX2xjFHxYq7nwi7W2wLUC RErahDqNfmGfhUcOWh6W1o/IMm/P5vi8ZOhcqUuze3YcFVXyw7A= =f52Q -----END PGP SIGNATURE----- Reply to: debian-security-announce@lists.debian.org Moritz Muehlenhoff (on-list) Moritz Muehlenhoff (off-list) Prev by Date: [SECURITY] [DSA 6297-1] samba security update Next by Date: [SECURITY] [DSA 6299-1] kdenlive security update Previous by thread: [SECURITY] [DSA 6297-1] samba security update Next by thread: [SECURITY] [DSA 6299-1] kdenlive security update Index(es): Date Thread