Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -3 articles for you...
89
security advisoryfedorabuffer overflowFedora 44 ImageMagick Critical Stack Buffer Overflow Vuln 2026-b45924b5e5
Update to 7.1.2.27. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-b45924b5e5 2026-07-17 00:51:59.635495+00:00 -------------------------------------------------------------------------------- Name : ImageMagick Product : Fedora 44 Version : 7.1.2.27 Release : 1.fc44 URL : https://imagemagick.org/ Summary : An X application for displaying and manipulating images Description : ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed work in the original format or a different one. ImageMagick also includes command line programs for creating animated or transparent .gifs, creating composite images, creating thumbnail images, and more. ImageMagick is one of your choices if you need a program to manipulate and display images. If you want to develop your own applications which use ImageMagick code or APIs, you need to install ImageMagick-devel as well. -------------------------------------------------------------------------------- Update Information: Update to 7.1.2.27 -------------------------------------------------------------------------------- ChangeLog: * Mon Jul 13 2026 Luya Tshimbalanga - 1:7.1.2.27-1 - Update to version 7.1.2.27 - Resolves: rhbz#2441780 * Sat Jul 11 2026 Luya Tshimbalanga - 1:7.1.2.23-2 - Update source URL address * Thu Jun 4 2026 Packit - 1:7.1.2.23-1 - Update to version 7.1.2.23 - Resolves: rhbz#2441780 * Sat May 30 2026 Richard Shaw - 1:7.1.2.13-4 - Rebuild for OpenColorIO 2.5.2. * Sun May 17 2026 Packit - 1:7.1.2.23-1 - Update to version 7.1.2.23 - Resolves: rhbz#2441780 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2379980 -CVE-2025-53101 ImageMagick: ImageMagick Stack Buffer Overflow [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2379980 [ 2 ] Bug #2379981 - CVE-2025-53015 ImageMagick: ImageMagick unbounded loop [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2379981 [ 3 ] Bug #2379982 - CVE-2025-53019 ImageMagick: ImageMagick Memory Leak [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2379982 [ 4 ] Bug #2388308 - CVE-2025-55160 ImageMagick: ImageMagick: Undefined Behavior [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2388308 [ 5 ] Bug #2388309 - CVE-2025-55005 ImageMagick: ImageMagick: heap-buffer overflow [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2388309 [ 6 ] Bug #2388311 - CVE-2025-55154 ImageMagick: ImageMagick: integer overflows in MNG magnification [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2388311 [ 7 ] Bug #2388312 - CVE-2025-55004 ImageMagick: ImageMagick: heap-buffer overflow [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2388312 [ 8 ] Bug #2391120 - CVE-2025-55298 ImageMagick: ImageMagick Format String Bug in InterpretImageFilename leads to arbitrary code execution [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2391120 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-b45924b5e5' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 16, 2026
•Important
Fedora
100
security advisorySuSEimportantSUSE: ImageMagick Important Integer Overflow Vuln 2025:4429-1
An update that solves one vulnerability can now be installed.. # Security update for ImageMagick Announcement ID: SUSE-SU-2025:4429-1 Release Date: 2025-12-17T11:26:59Z Rating: important References: * bsc#1254820 Cross-References: * CVE-2025-66628 CVSS scores: * CVE-2025-66628 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2025-66628 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2025-66628 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for ImageMagick fixes the following issues: * CVE-2025-66628: possible integer overflow in the TIM image parser's `ReadTIMImage` function can lead to arbitrary memory disclosure on 32-bit systems (bsc#1254820). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2025-4429=1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-4429=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * ImageMagick-config-6-upstream-6.8.8.1-71.218.1 * libMagickCore-6_Q16-1-6.8.8.1-71.218.1 * ImageMagick-debugsource-6.8.8.1-71.218.1 * ImageMagick-debuginfo-6.8.8.1-71.218.1 * ImageMagick-devel-6.8.8.1-71.218.1 * libMagickWand-6_Q16-1-6.8.8.1-71.218.1 *libMagickWand-6_Q16-1-debuginfo-6.8.8.1-71.218.1 * libMagickCore-6_Q16-1-debuginfo-6.8.8.1-71.218.1 * ImageMagick-config-6-SUSE-6.8.8.1-71.218.1 * libMagick++-devel-6.8.8.1-71.218.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * ImageMagick-config-6-upstream-6.8.8.1-71.218.1 * libMagickCore-6_Q16-1-6.8.8.1-71.218.1 * ImageMagick-debugsource-6.8.8.1-71.218.1 * ImageMagick-debuginfo-6.8.8.1-71.218.1 * ImageMagick-devel-6.8.8.1-71.218.1 * libMagickWand-6_Q16-1-6.8.8.1-71.218.1 * libMagickWand-6_Q16-1-debuginfo-6.8.8.1-71.218.1 * libMagickCore-6_Q16-1-debuginfo-6.8.8.1-71.218.1 * ImageMagick-config-6-SUSE-6.8.8.1-71.218.1 * libMagick++-devel-6.8.8.1-71.218.1 ## References: * https://www.suse.com/security/cve/CVE-2025-66628.html * https://bugzilla.suse.com/show_bug.cgi?id=1254820 . SUSE updates ImageMagick for security issues including an important integer overflow vulnerability. Get details here.. ImageMagick, SUSE, security update, integer overflow, memory disclosure. . Severity: Important. LinuxSecurity.com Team
Dec 17, 2025
•Important
SuSE
172
security advisorydenial of servicecriticalUbuntu: ImageMagick Critical DoS Attack Advisory USN-7876-1 CVE-2025-62171
ImageMagick could be made to crash or run programs as your login if it opened a specially crafted file.. ========================================================================== Ubuntu Security Notice USN-7876-1 November 20, 2025 imagemagick vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: ImageMagick could be made to crash or run programs as your login if it opened a specially crafted file. Software Description: - imagemagick: Image manipulation programs and library Details: It was discovered that ImageMagick did not properly handle memory when encoding BMP images. An attacker could possibly use this issue to cause ImageMagick to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue exists due to an incomplete fix for CVE-2025-57803. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS imagemagick-6.q16 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm4 Available with Ubuntu Pro imagemagick-6.q16hdri 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm4 Available with Ubuntu Pro libimage-magick-q16-perl 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm4 Available with Ubuntu Pro libimage-magick-q16hdri-perl 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm4 Available with Ubuntu Pro libmagick++-6.q16-9t64 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm4 Available with Ubuntu Pro libmagick++-6.q16hdri-9t64 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm4 Available with Ubuntu Pro libmagickcore-6.q16-7-extra 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm4 Availablewith Ubuntu Pro libmagickcore-6.q16-7t64 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm4 Available with Ubuntu Pro libmagickcore-6.q16hdri-7-extra 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm4 Available with Ubuntu Pro libmagickcore-6.q16hdri-7t64 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm4 Available with Ubuntu Pro libmagickwand-6.q16-7t64 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm4 Available with Ubuntu Pro libmagickwand-6.q16hdri-7t64 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm4 Available with Ubuntu Pro Ubuntu 22.04 LTS imagemagick-6.q16 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 Available with Ubuntu Pro imagemagick-6.q16hdri 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 Available with Ubuntu Pro libimage-magick-q16-perl 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 Available with Ubuntu Pro libimage-magick-q16hdri-perl 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 Available with Ubuntu Pro libmagick++-6.q16-8 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 Available with Ubuntu Pro libmagick++-6.q16hdri-8 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 Available with Ubuntu Pro libmagickcore-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 Available with Ubuntu Pro libmagickcore-6.q16-6-extra 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 Available with Ubuntu Pro libmagickcore-6.q16hdri-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 Available with Ubuntu Pro libmagickcore-6.q16hdri-6-extra 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 Available with Ubuntu Pro libmagickwand-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 Available with Ubuntu Pro libmagickwand-6.q16hdri-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 Available with Ubuntu Pro Ubuntu 20.04 LTS libimage-magick-q16-perl 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm5 Available with Ubuntu Pro libimage-magick-q16hdri-perl 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm5 Available with Ubuntu Pro libmagickcore-6.q16-6 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm5 Available with Ubuntu Pro libmagickcore-6.q16hdri-6 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm5 Available with Ubuntu Pro Ubuntu 18.04 LTS imagemagick-6.q16 8:6.9.7.4+dfsg-16ubuntu6.15+esm7 Available with Ubuntu Pro imagemagick-6.q16hdri 8:6.9.7.4+dfsg-16ubuntu6.15+esm7 Available with Ubuntu Pro libimage-magick-q16-perl 8:6.9.7.4+dfsg-16ubuntu6.15+esm7 Available with Ubuntu Pro libimage-magick-q16hdri-perl 8:6.9.7.4+dfsg-16ubuntu6.15+esm7 Available with Ubuntu Pro libmagick++-6.q16-7 8:6.9.7.4+dfsg-16ubuntu6.15+esm7 Available with Ubuntu Pro libmagick++-6.q16hdri-7 8:6.9.7.4+dfsg-16ubuntu6.15+esm7 Available with Ubuntu Pro libmagickcore-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.15+esm7 Available with Ubuntu Pro libmagickcore-6.q16-3-extra 8:6.9.7.4+dfsg-16ubuntu6.15+esm7 Available with Ubuntu Pro libmagickcore-6.q16hdri-3 8:6.9.7.4+dfsg-16ubuntu6.15+esm7 Available with Ubuntu Pro libmagickcore-6.q16hdri-3-extra 8:6.9.7.4+dfsg-16ubuntu6.15+esm7 Available with Ubuntu Pro libmagickwand-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.15+esm7 Available with Ubuntu Pro libmagickwand-6.q16hdri-3 8:6.9.7.4+dfsg-16ubuntu6.15+esm7 Available with Ubuntu Pro Ubuntu 16.04 LTS imagemagick-6.q16 8:6.8.9.9-7ubuntu5.16+esm15 Available with Ubuntu Pro libimage-magick-q16-perl 8:6.8.9.9-7ubuntu5.16+esm15 Available with Ubuntu Pro libmagick++-6.q16-5v5 8:6.8.9.9-7ubuntu5.16+esm15 Available with Ubuntu Pro libmagickcore-6.q16-2 8:6.8.9.9-7ubuntu5.16+esm15 Available with Ubuntu Pro libmagickcore-6.q16-2-extra 8:6.8.9.9-7ubuntu5.16+esm15 Available with Ubuntu Pro libmagickwand-6.q16-2 8:6.8.9.9-7ubuntu5.16+esm15 Available with Ubuntu Pro Ubuntu 14.04 LTS imagemagick 8:6.7.7.10-6ubuntu3.13+esm16 Available with Ubuntu Pro imagemagick-common 8:6.7.7.10-6ubuntu3.13+esm16 Available with Ubuntu Pro libmagick++5 8:6.7.7.10-6ubuntu3.13+esm16 Available with Ubuntu Pro libmagickcore5 8:6.7.7.10-6ubuntu3.13+esm16 Available with Ubuntu Pro libmagickcore5-extra 8:6.7.7.10-6ubuntu3.13+esm16 Available with Ubuntu Pro libmagickwand5 8:6.7.7.10-6ubuntu3.13+esm16 Available with Ubuntu Pro perlmagick 8:6.7.7.10-6ubuntu3.13+esm16 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7876-1 CVE-2025-62171 . Critical ImageMagick issue on Ubuntu allows denial of service or code execution. Update recommended to ensure security.. Ubuntu Security, ImageMagick, Denial of Service, Critical Update. . Severity: Critical. LinuxSecurity.com Team
Nov 20, 2025
•Critical
Ubuntu
203
security advisorysecurity updatecritical threatMageia 8: MGASA-2022-0003 Critical: gegl Shell Expansion Threat
Fix shell expansion via crafted pathname in the ImageMagick convert fallback References: - https://bugs.mageia.org/show_bug.cgi?id=29829 . MGASA-2022-0003 - Updated gegl packages fix security vulnerability Publication date: 03 Jan 2022 URL: https://advisories.mageia.org/MGASA-2022-0003.html Type: security Affected Mageia releases: 8 CVE: CVE-2021-45463 Fix shell expansion via crafted pathname in the ImageMagick convert fallback References: - https://bugs.mageia.org/show_bug.cgi?id=29829 - https://lists.suse.com/pipermail/sle-security-updates/2021-December/009954.html - - https://www.cve.org/CVERecord?id=CVE-2021-45463 SRPMS: - 8/core/gegl-0.4.34-1.mga8 . MGASA-2022-0004 updates gimp libraries to address potential buffer overflow issues in GraphicsMagick.. Mageia Security Advisory, gegl update, ImageMagick threat, crafted path vulnerability. . Severity: Critical. LinuxSecurity.com Team
Jan 03, 2022
•Critical
Mageia
89
security advisoryfedoracriticalFedora 34 VDR-SkinOpacity: FEDORA-2021-b58af96f33 Critical ImageMagick Fix
ImageMagick is updated 6.9.12-31 , soname bump , many security fixes. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-b58af96f33 2021-12-05 01:37:20.956040 --------------------------------------------------------------------------------Name : vdr-skinnopacity Product : Fedora 34 Version : 1.1.8 Release : 1.fc34.1 URL : https://gitlab.com/kamel5/SkinNopacity Summary : A highly customizable native true color skin for the Video Disc Recorder Description : The VDR plugin "nOpacity" is a highly customizable native true color skin for the Video Disc Recorder. --------------------------------------------------------------------------------Update Information: ImageMagick is updated 6.9.12-31 , soname bump , many security fixes --------------------------------------------------------------------------------ChangeLog: * Fri Nov 26 2021 Mamoru TASAKA - 1.1.8-1.1 - rebuild for new ImageMagick --------------------------------------------------------------------------------References: [ 1 ] Bug #1901226 - CVE-2020-25664 ImageMagick: heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1901226 [ 2 ] Bug #2025909 - ImageMagick-6.9.12-31 is available https://bugzilla.redhat.com/show_bug.cgi?id=2025909 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-b58af96f33' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Dec 04, 2021
•Critical
Fedora
89
security advisorysecurity issuefedoraFedora 26: FEDORA-2017-897a192750 Critical: Rubygem-Rmagick NULL Pointer
6.9.9-15 ---- Rebuilt for ImageMagick 6.9.9-13. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-897a192750 2017-10-10 19:22:45.487275 --------------------------------------------------------------------------------Name : rubygem-rmagick Product : Fedora 26 Version : 2.16.0 Release : 7.fc26 URL : https://github.com/rmagick/rmagick Summary : Ruby binding to ImageMagick Description : RMagick is an interface between Ruby and ImageMagick. --------------------------------------------------------------------------------Update Information: 6.9.9-15 ---- Rebuilt for ImageMagick 6.9.9-13 --------------------------------------------------------------------------------References: [ 1 ] Bug #1496308 - [config/type-ghostscript.xml.in] using outdated hardcoded paths for (URW)++ fonts https://bugzilla.redhat.com/show_bug.cgi?id=1496308 [ 2 ] Bug #1496032 - convert: Ignoring invalid time value https://bugzilla.redhat.com/show_bug.cgi?id=1496032 [ 3 ] Bug #1487680 - CVE-2017-13768 ImageMagick: NULL pointer dereference in IdentifyImage function in MagickCore/identify.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1487680 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade rubygem-rmagick' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Oct 10, 2017
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!