Skip to content
OpenAdvisories
High RHSA-2026:5573 2 CVEs

Red Hat Security Advisory: ImageMagick security update

Published Mar 24, 2026 · Updated Jun 30, 2026

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick 0:6.9.10.68-13.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-c++ 0:6.9.10.68-13.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-c++-devel 0:6.9.10.68-13.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-devel 0:6.9.10.68-13.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-perl 0:6.9.10.68-13.el7_9

Vulnerabilities 2

  • High 8.6
    CVE-2026-25965

    ImageMagick's policy bypass through path traversal allows reading restricted content despite secured policy

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, ImageMagick’s path security policy is enforced on the raw filename string before the filesystem resolves it. As a result, …

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet
  • High 7.5
    CVE-2026-25985

    Memory allocation with excessive without limits in the internal SVG decoder

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted SVG file containing an malicious element causes ImageMagick to attempt to allocate ~674 GB of memory, leading to…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2442118
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2442127
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5573.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-25965
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-25965
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-25965
  • article
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8jvj-p28h-9gm7
  • report
    https://access.redhat.com/security/cve/CVE-2026-25985
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-25985
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-25985
  • article
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v7g2-m8c5-mf84