Summary
[6.9.10.68-7.0.7]
- Fixes Local File Disclosure via Path Traversal (CVE-2026-25965) [Orabug: 39118995]
- Fixes Memory allocation with excessive without limits in the internal SVG decoder (CVE-2026-25985)
[6.9.10.68-7.0.5]
- Fix CVE-2025-62171 and CVE-2026-23876 [Orabug: 38997140]
[6.9.10.68-7.0.3]
- Security update CVE-2025-57803 [Orabug: 38455460]
[6.9.10.68-7.0.1]
- Fix for CVE-2025-55154 [Orabug: 38417011]
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | ImageMagick | 0:6.9.10.68-7.0.7.el7_9 |
| Oracle Linux · 7 | ImageMagick-c++ | 0:6.9.10.68-7.0.7.el7_9 |
| Oracle Linux · 7 | ImageMagick-c++-devel | 0:6.9.10.68-7.0.7.el7_9 |
| Oracle Linux · 7 | ImageMagick-devel | 0:6.9.10.68-7.0.7.el7_9 |
| Oracle Linux · 7 | ImageMagick-doc | 0:6.9.10.68-7.0.7.el7_9 |
| Oracle Linux · 7 | ImageMagick-perl | 0:6.9.10.68-7.0.7.el7_9 |
Vulnerabilities 2
-
High 8.6
ImageMagick's policy bypass through path traversal allows reading restricted content despite secured policy
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, ImageMagick’s path security policy is enforced on the raw filename string before the filesystem resolves it. As a result, …
-
High 7.5
Memory allocation with excessive without limits in the internal SVG decoder
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted SVG file containing an malicious element causes ImageMagick to attempt to allocate ~674 GB of memory, leading to…