Summary
[6.9.10.68-7.0.5]
- Fix CVE-2025-62171 and CVE-2026-23876 [Orabug: 38997140]
[6.9.10.68-7.0.3]
- Security update CVE-2025-57803 [Orabug: 38455460]
[6.9.10.68-7.0.1]
- Fix for CVE-2025-55154 [Orabug: 38417011]
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | ImageMagick | 0:6.9.10.68-7.0.5.el7_9 |
| Oracle Linux · 7 | ImageMagick-c++ | 0:6.9.10.68-7.0.5.el7_9 |
| Oracle Linux · 7 | ImageMagick-c++-devel | 0:6.9.10.68-7.0.5.el7_9 |
| Oracle Linux · 7 | ImageMagick-devel | 0:6.9.10.68-7.0.5.el7_9 |
| Oracle Linux · 7 | ImageMagick-doc | 0:6.9.10.68-7.0.5.el7_9 |
| Oracle Linux · 7 | ImageMagick-perl | 0:6.9.10.68-7.0.5.el7_9 |
Vulnerabilities 2
-
High 8.1
Heap buffer overflow with attacker-controlled data in XBM parser
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder (ReadXBMImage) allows an attacker to write controlled data p…
-
Medium 5.9
ImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit systems
ImageMagick is an open source software suite for displaying, converting, and editing raster image files. In ImageMagick versions prior to 7.1.2-7 and 6.9.13-32, an integer overflow vulnerability exists in the BMP decoder on 32-bit systems. The vulnerability o…