Summary
[6.9.10.68-7.0.9]
- Fix CVE-2026-28691 and CVE-2026-28693 [Orabug: 39174244]
[6.9.10.68-7.0.7]
- Fixes Local File Disclosure via Path Traversal (CVE-2026-25965) [Orabug: 39118995]
- Fixes Memory allocation with excessive without limits in the internal SVG decoder (CVE-2026-25985)
[6.9.10.68-7.0.5]
- Fix CVE-2025-62171 and CVE-2026-23876 [Orabug: 38997140]
[6.9.10.68-7.0.3]
- Security update CVE-2025-57803 [Orabug: 38455460]
[6.9.10.68-7.0.1]
- Fix for CVE-2025-55154 [Orabug: 38417011]
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | ImageMagick | 0:6.9.10.68-7.0.9.el7_9 |
| Oracle Linux · 7 | ImageMagick-c++ | 0:6.9.10.68-7.0.9.el7_9 |
| Oracle Linux · 7 | ImageMagick-c++-devel | 0:6.9.10.68-7.0.9.el7_9 |
| Oracle Linux · 7 | ImageMagick-devel | 0:6.9.10.68-7.0.9.el7_9 |
| Oracle Linux · 7 | ImageMagick-doc | 0:6.9.10.68-7.0.9.el7_9 |
| Oracle Linux · 7 | ImageMagick-perl | 0:6.9.10.68-7.0.9.el7_9 |
Vulnerabilities 2
-
High 8.1
ImageMagick has an integer overflow in DIB coder can result in out of bounds read or write
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an integer overflow in DIB coder can result in out of bounds read or write. This vulnerability is fixed in 7.1.2-16 and 6.…
-
High 7.5
ImageMagick has an uninitialized pointer dereference in JBIG decoder
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an uninitialized pointer dereference vulnerability exists in the JBIG decoder due to a missing check. This vulnerability i…