Debian alert DLA-4559-1 (imagemagick)

From:
             
 
rouca@debian.org
To:
             
 
<debian-lts-announce@lists.debian.org>
Subject:
             
 
[SECURITY] [DLA 4559-1] imagemagick security update
Date:
             
 
Fri, 01 May 2026 22:33:06 +0200
Message-ID:
             
 
<14efc2e1039270279fb306c473310faf@debian.org>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4559-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                   Bastien Roucariès
May 01, 2026                                  https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : imagemagick
Version        : 8:6.9.11.60+dfsg-1.3+deb11u12
CVE ID         : CVE-2026-33899 CVE-2026-33900 CVE-2026-33901 CVE-2026-33905 
                 CVE-2026-33908 CVE-2026-34238 CVE-2026-40310 CVE-2026-40311
Debian Bug     : 1134627

Multiple security vulnerabilities were discovered in imagemagick, a
software suite used for editing and manipulating digital images, which
could lead to denial of service, information disclosure or potentially
arbitrary code execution if malformed images are processed.

For Debian 11 bullseye, these problems have been fixed in version
8:6.9.11.60+dfsg-1.3+deb11u12.

We recommend that you upgrade your imagemagick packages.

For the detailed security status of imagemagick please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/imagemagick

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=2pum
-----END PGP SIGNATURE-----