| Package | imagemagick |
|---|---|
| Version | 8:6.9.10.23+dfsg-2.1+deb10u22 (buster), 8:6.9.11.60+dfsg-1.3+deb11u17 (bullseye) |
| Related CVEs | CVE-2026-25971 CVE-2026-62343 CVE-2026-62946 CVE-2026-64685 CVE-2026-86420 CVE-2026-86421 CVE-2026-86423 CVE-2026-86424 CVE-2026-86425 CVE-2026-93586 CVE-2026-93587 CVE-2026-93588 CVE-2026-93589 CVE-2026-102635 CVE-2026-106565 CVE-2026-106566 CVE-2026-106567 CVE-2026-106568 CVE-2026-106570 CVE-2026-106571 CVE-2026-106572 CVE-2026-106573 CVE-2026-106577 CVE-2026-106578 CVE-2026-106579 CVE-2026-106580 CVE-2026-107208 CVE-2026-107209 CVE-2026-107210 CVE-2026-109261 CVE-2026-116152 |
Multiple security vulnerabilities were discovered in imagemagick, a software suite used for editing and manipulating digital images, which could lead to denial of service, information disclosure or potentially arbitrary code execution if malformed images are processed.
For Debian 10 buster, these problems have been fixed in version 8:6.9.10.23+dfsg-2.1+deb10u22.
For Debian 11 bullseye, these problems have been fixed in version 8:6.9.11.60+dfsg-1.3+deb11u17.
We recommend that you upgrade your imagemagick packages.
Further information about Extended LTS security advisories can be found in the dedicated section of our website.