Ubuntu alert USN-8558-1 (imagemagick)
| From: | noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com> | |
| To: | ubuntu-security-announce@lists.ubuntu.com | |
| Subject: | [USN-8558-1] ImageMagick vulnerabilities | |
| Date: | Tue, 21 Jul 2026 19:00:57 +0000 | |
| Message-ID: | <E1wmFi5-0000ZL-HI@lists.ubuntu.com> | |
| Cc: | noreply+usn-bot@canonical.com |
========================================================================== Ubuntu Security Notice USN-8558-1 July 20, 2026 imagemagick vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: Several security issues were fixed in ImageMagick. Software Description: - imagemagick: Image manipulation programs and library Details: It was discovered that ImageMagick did not limit mutual references between MVG files. An attacker could possibly use this issue to cause a stack overflow, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2025-68950) It was discovered that the ImageMagick MSL coder destroyed a cloned image twice when an MSL script failed. An attacker could possibly use this issue to cause a use-after-free, resulting in a denial of service, or arbitrary code execution. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2026-28688) It was discovered that the ImageMagick VIFF image encoder did not properly validate the packet count, leading to an integer overflow on 32-bit systems. An attacker could possibly use this issue to cause an out-of- bounds heap write, resulting in a denial of service. (CVE-2026-33900) It was discovered that ImageMagick did not properly handle the column offset when sampling an image. An attacker could possibly use this issue to cause ImageMagick to read out of bounds, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-33905) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS imagemagick-7-common 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro imagemagick-7.q16 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro imagemagick-7.q16hdri 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libimage-magick-q16-perl 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libimage-magick-q16hdri-perl 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagick++-7.q16-5 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagick++-7.q16-dev 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagick++-7.q16hdri-5 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagick++-7.q16hdri-dev 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagickcore-7-arch-config 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagickcore-7.q16-10 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagickcore-7.q16-10-extra 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagickcore-7.q16-dev 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagickcore-7.q16hdri-10 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagickcore-7.q16hdri-10-extra 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagickcore-7.q16hdri-dev 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagickwand-7-headers 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagickwand-7.q16-10 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagickwand-7.q16-dev 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagickwand-7.q16hdri-10 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagickwand-7.q16hdri-dev 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 24.04 LTS imagemagick-6-common 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro imagemagick-6.q16 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro imagemagick-6.q16hdri 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libimage-magick-q16-perl 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libimage-magick-q16hdri-perl 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagick++-6.q16-9t64 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagick++-6.q16-dev 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagick++-6.q16hdri-9t64 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagick++-6.q16hdri-dev 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagickcore-6.q16-7-extra 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagickcore-6.q16-7t64 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagickcore-6.q16-dev 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagickcore-6.q16hdri-7-extra 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagickcore-6.q16hdri-7t64 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagickcore-6.q16hdri-dev 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagickwand-6-headers 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagickwand-6.q16-7t64 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagickwand-6.q16-dev 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagickwand-6.q16hdri-7t64 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagickwand-6.q16hdri-dev 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro Ubuntu 22.04 LTS imagemagick-6-common 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro imagemagick-6.q16 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro imagemagick-6.q16hdri 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libimage-magick-q16-perl 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libimage-magick-q16hdri-perl 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagick++-6.q16-8 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagick++-6.q16-dev 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagick++-6.q16hdri-8 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagick++-6.q16hdri-dev 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagickcore-6-arch-config 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagickcore-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagickcore-6.q16-6-extra 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagickcore-6.q16-dev 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagickcore-6.q16hdri-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagickcore-6.q16hdri-6-extra 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagickcore-6.q16hdri-dev 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagickwand-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagickwand-6.q16-dev 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagickwand-6.q16hdri-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagickwand-6.q16hdri-dev 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro Ubuntu 20.04 LTS imagemagick-6-common 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro imagemagick-6.q16 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro imagemagick-6.q16hdri 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libimage-magick-q16-perl 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libimage-magick-q16hdri-perl 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagick++-6.q16-8 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagick++-6.q16-dev 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagick++-6.q16hdri-8 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagick++-6.q16hdri-dev 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagickcore-6.q16-6 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagickcore-6.q16-6-extra 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagickcore-6.q16-dev 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagickcore-6.q16hdri-6 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagickcore-6.q16hdri-6-extra 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagickcore-6.q16hdri-dev 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagickwand-6.q16-6 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagickwand-6.q16-dev 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagickwand-6.q16hdri-6 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagickwand-6.q16hdri-dev 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro Ubuntu 18.04 LTS imagemagick-6-common 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro imagemagick-6.q16 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro imagemagick-6.q16hdri 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libimage-magick-q16-perl 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libimage-magick-q16hdri-perl 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagick++-6.q16-7 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagick++-6.q16-dev 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagick++-6.q16hdri-7 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagick++-6.q16hdri-dev 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagickcore-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagickcore-6.q16-3-extra 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagickcore-6.q16-dev 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagickcore-6.q16hdri-3 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagickcore-6.q16hdri-3-extra 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagickcore-6.q16hdri-dev 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagickwand-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagickwand-6.q16-dev 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagickwand-6.q16hdri-3 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagickwand-6.q16hdri-dev 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro Ubuntu 16.04 LTS imagemagick-6.q16 8:6.8.9.9-7ubuntu5.16+esm22 Available with Ubuntu Pro imagemagick-common 8:6.8.9.9-7ubuntu5.16+esm22 Available with Ubuntu Pro libimage-magick-q16-perl 8:6.8.9.9-7ubuntu5.16+esm22 Available with Ubuntu Pro libmagick++-6.q16-5v5 8:6.8.9.9-7ubuntu5.16+esm22 Available with Ubuntu Pro libmagick++-6.q16-dev 8:6.8.9.9-7ubuntu5.16+esm22 Available with Ubuntu Pro libmagickcore-6.q16-2 8:6.8.9.9-7ubuntu5.16+esm22 Available with Ubuntu Pro libmagickcore-6.q16-2-extra 8:6.8.9.9-7ubuntu5.16+esm22 Available with Ubuntu Pro libmagickcore-6.q16-dev 8:6.8.9.9-7ubuntu5.16+esm22 Available with Ubuntu Pro libmagickwand-6.q16-2 8:6.8.9.9-7ubuntu5.16+esm22 Available with Ubuntu Pro libmagickwand-6.q16-dev 8:6.8.9.9-7ubuntu5.16+esm22 Available with Ubuntu Pro Ubuntu 14.04 LTS imagemagick 8:6.7.7.10-6ubuntu3.13+esm23 Available with Ubuntu Pro imagemagick-common 8:6.7.7.10-6ubuntu3.13+esm23 Available with Ubuntu Pro libmagick++-dev 8:6.7.7.10-6ubuntu3.13+esm23 Available with Ubuntu Pro libmagick++5 8:6.7.7.10-6ubuntu3.13+esm23 Available with Ubuntu Pro libmagickcore-dev 8:6.7.7.10-6ubuntu3.13+esm23 Available with Ubuntu Pro libmagickcore5 8:6.7.7.10-6ubuntu3.13+esm23 Available with Ubuntu Pro libmagickcore5-extra 8:6.7.7.10-6ubuntu3.13+esm23 Available with Ubuntu Pro libmagickwand-dev 8:6.7.7.10-6ubuntu3.13+esm23 Available with Ubuntu Pro libmagickwand5 8:6.7.7.10-6ubuntu3.13+esm23 Available with Ubuntu Pro perlmagick 8:6.7.7.10-6ubuntu3.13+esm23 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8558-1 CVE-2025-68950, CVE-2026-28688, CVE-2026-33900, CVE-2026-33905
Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEE+8neBLO2Hp/ppPlOcpJm3tlzhgEFAmpeyYoACgkQcpJm3tlz hgFekw/+LWJJBPg5CHfEPp3PHUdBAOM83xDzE0o1+BesCnKIyIpzXslKXLYOVsR8 WQ6X99qoBvqFWWXNl+nZ+Al3npMldPGeit1vb/Zc0m/YoNkyIz/GBni3cpZ/YdVx UAumt3pJJE7dKDxHN7YwUKGkGEeUmhi2M4vn59EDzxmq8+uVBjqIDPisXgzoy3/D 6EwHLM97COsYn9YwN1ElHnZcPwzq51PuGQo23Z0FFvnEv6VJQWnWH186vuUxQnc4 //xjC8mfquygfKuPu0FH0Rl0O2t0WolBQLzO+VYcgt0eAVIfCOFl5ETjGAKb/gA+ rJbVQQyN2TnMK1vg0Xn2PeQF19xw3/6iYj86XPbEZSDRmZvmBVVQKkeWRqkvIZCe AAFq8QbEUDH2WWPjaSEWhT4PyqPblOVS9YOaAQf8kRnSdneZqMc7fSnFp/DkGvhX JRcQJKUK9b8ON/LL4d/lN71Sgk0zkOrc4E37KJ8u+QNvm5Rr5bAYITLTdYTx5FBa a1KnQaseOhS+GfICdj4eVYKLqWGrFe44nqOisOaNKbGAxywSzf43t6Ifl4LmK8z9 OQ54Ysj9+lUbNkkUB1LKm+qsWI+mMhfI+kC81PTwvzcgfg225vK7XNR6BJqSF6bE oS9Atix746gCzLUBVJho3pCWPTy+IAvhrFtWQQVqz1haoUlqSZQ= =dvO4 -----END PGP SIGNATURE-----