Debian alert DLA-4680-1 (imagemagick)

From:
             
 
rouca@debian.org
To:
             
 
<debian-lts-announce@lists.debian.org>
Subject:
             
 
[SECURITY] [DLA 4680-1] imagemagick security update
Date:
             
 
Tue, 14 Jul 2026 01:23:50 +0200
Message-ID:
             
 
<2dde6b5532a2b8279cab9d377c20d547@debian.org>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4680-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                   Bastien Roucariès
July 13, 2026                                 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : imagemagick
Version        : 8:6.9.11.60+dfsg-1.3+deb11u15 8:6.9.11.60+dfsg-1.6+deb12u12
CVE ID         : CVE-2026-53466 CVE-2026-53467 CVE-2026-55577 CVE-2026-55594 
                 CVE-2026-55595 CVE-2026-55597 CVE-2026-55628 CVE-2026-56361 
                 CVE-2026-56363 CVE-2026-56365 CVE-2026-56366 CVE-2026-56367 
                 CVE-2026-56368 CVE-2026-56370 CVE-2026-56371 CVE-2026-56373 
                 CVE-2026-56376 CVE-2026-56377 CVE-2026-56378

Multiple security vulnerabilities were discovered in imagemagick, a
software suite used for editing and manipulating digital images, which
could lead to denial of service, information disclosure or potentially
arbitrary code execution if malformed images are processed.

For Debian 11 bullseye, these problems have been fixed in version
8:6.9.11.60+dfsg-1.3+deb11u15.

For Debian 12 bookworm, these problems have been fixed in version
8:6.9.11.60+dfsg-1.6+deb12u12

We recommend that you upgrade your imagemagick packages.

For the detailed security status of imagemagick please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/imagemagick

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=wUr3
-----END PGP SIGNATURE-----