Skip to content
OpenAdvisories
High ALAS2-2025-2980 1 CVE

Important: ImageMagick security update (Amazon Linux 2)

Published Aug 21, 2025 · Updated Sep 4, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-55154: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage (in coders/png.c) are unsafe and can overflow, leading to memory corruption. This issue has been patched in versions 6.9.13-27 and 7.1.2-1.

Fixed packages 7

ReleasePackageFixed in
Amazon Linux · 2 ImageMagick 0:6.9.10.97-1.amzn2.0.15
Amazon Linux · 2 ImageMagick-c++ 0:6.9.10.97-1.amzn2.0.15
Amazon Linux · 2 ImageMagick-c++-devel 0:6.9.10.97-1.amzn2.0.15
Amazon Linux · 2 ImageMagick-debuginfo 0:6.9.10.97-1.amzn2.0.15
Amazon Linux · 2 ImageMagick-devel 0:6.9.10.97-1.amzn2.0.15
Amazon Linux · 2 ImageMagick-doc 0:6.9.10.97-1.amzn2.0.15
Amazon Linux · 2 ImageMagick-perl 0:6.9.10.97-1.amzn2.0.15

Vulnerabilities 1

  • High 8.8
    CVE-2025-55154

    ImageMagick: integer overflows in MNG magnification

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage (in coders/png.c) are unsafe and can overflow, leading to memory corrupt…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu NuGet

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-55154.html