Skip to content
OpenAdvisories
High RHSA-2026:6713 2 CVEs

Red Hat Security Advisory: ImageMagick security update

Published Apr 7, 2026 · Updated Jun 30, 2026

Ecosystem: Red Hat

Fixed packages 7

ReleasePackageFixed in
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick 0:6.9.10.68-15.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-c++ 0:6.9.10.68-15.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-c++-devel 0:6.9.10.68-15.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-debuginfo 0:6.9.10.68-15.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-devel 0:6.9.10.68-15.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-doc 0:6.9.10.68-15.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-perl 0:6.9.10.68-15.el7_9

Vulnerabilities 2

  • High 8.1
    CVE-2026-28693

    ImageMagick has an integer overflow in DIB coder can result in out of bounds read or write

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an integer overflow in DIB coder can result in out of bounds read or write. This vulnerability is fixed in 7.1.2-16 and 6.…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet
  • High 7.5
    CVE-2026-28691

    ImageMagick has an uninitialized pointer dereference in JBIG decoder

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an uninitialized pointer dereference vulnerability exists in the JBIG decoder due to a missing check. This vulnerability i…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2445888
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2445902
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6713.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-28691
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-28691
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-28691
  • article
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wj8w-pjxf-9g4f
  • report
    https://access.redhat.com/security/cve/CVE-2026-28693
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-28693
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-28693
  • article
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hffp-q43q-qq76