Summary
[6.9.10.68-7.0.11]
- Fix CVE-2026-32636 [Orabug: 39375225]
[6.9.10.68-7.0.9]
- Fix CVE-2026-28691 and CVE-2026-28693 [Orabug: 39174244]
[6.9.10.68-7.0.7]
- Fixes Local File Disclosure via Path Traversal (CVE-2026-25965) [Orabug: 39118995]
- Fixes Memory allocation with excessive without limits in the internal SVG decoder (CVE-2026-25985)
[6.9.10.68-7.0.5]
- Fix CVE-2025-62171 and CVE-2026-23876 [Orabug: 38997140]
[6.9.10.68-7.0.3]
- Security update CVE-2025-57803 [Orabug: 38455460]
[6.9.10.68-7.0.1]
- Fix for CVE-2025-55154 [Orabug: 38417011]
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | ImageMagick | 0:6.9.10.68-7.0.11.el7_9 |
| Oracle Linux · 7 | ImageMagick-c++ | 0:6.9.10.68-7.0.11.el7_9 |
| Oracle Linux · 7 | ImageMagick-c++-devel | 0:6.9.10.68-7.0.11.el7_9 |
| Oracle Linux · 7 | ImageMagick-devel | 0:6.9.10.68-7.0.11.el7_9 |
| Oracle Linux · 7 | ImageMagick-doc | 0:6.9.10.68-7.0.11.el7_9 |
| Oracle Linux · 7 | ImageMagick-perl | 0:6.9.10.68-7.0.11.el7_9 |
Vulnerabilities 1
-
Medium 5.3
ImageMagick has a heap-buffer-overflow in NewXMLTree which could result in crash
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-17 and 6.9.13-42, the NewXMLTree method contains a bug that could result in a crash due to an out of write bounds of a single zero byte. Versions 7.1…