Skip to content
OpenAdvisories
Medium ALAS2-2026-3305 1 CVE

Moderate: ImageMagick security update (Amazon Linux 2)

Published May 25, 2026 · Updated May 26, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-42050: Stack buffer overflow in XTileImage

Fixed packages 7

ReleasePackageFixed in
Amazon Linux · 2 ImageMagick 0:6.9.10.97-1.amzn2.0.28
Amazon Linux · 2 ImageMagick-c++ 0:6.9.10.97-1.amzn2.0.28
Amazon Linux · 2 ImageMagick-c++-devel 0:6.9.10.97-1.amzn2.0.28
Amazon Linux · 2 ImageMagick-debuginfo 0:6.9.10.97-1.amzn2.0.28
Amazon Linux · 2 ImageMagick-devel 0:6.9.10.97-1.amzn2.0.28
Amazon Linux · 2 ImageMagick-doc 0:6.9.10.97-1.amzn2.0.28
Amazon Linux · 2 ImageMagick-perl 0:6.9.10.97-1.amzn2.0.28

Vulnerabilities 1

  • Medium 5.5
    CVE-2026-42050

    ImageMagick: Stack buffer overflow in XTileImage

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-21 and 6.9.13-46, a malicious MIFF file could trigger an overflow when a user opens it in the display tool and right-clicks a tile to invoke the Load…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-42050.html