← All notices | Source (USN-8739-1) | Text version

QSN-8739-1: ImageMagick vulnerabilities

September 8, 2026

Summary

Several security issues were fixed in ImageMagick.

Details

It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-56366, CVE-2026-56368, CVE-2026-56371, CVE-2026-56373)

It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-56370)

It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service or expose sensitive information. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-56378)

It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-56379)

It was discovered that ImageMagick incorrectly handled memory allocation in certain operations. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-61465)

It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 22.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-61857)

It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61870)

It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-61866)

It was discovered that ImageMagick incorrectly handled certain images on 32-bit systems. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-62946)

Affected QuantaStor releases

ReleasePlatformPackageExposureShipped versionFixed versionStatus
6.9.1.001Ubuntu 22.04 LTSimagemagickInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.9.1.001Ubuntu 22.04 LTSimagemagick-6-commonInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.9.1.001Ubuntu 22.04 LTSimagemagick-6.q16Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.9.1.001Ubuntu 22.04 LTSlibmagickcore-6.q16-6Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.9.1.001Ubuntu 22.04 LTSlibmagickcore-6.q16-6-extraInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.9.1.001Ubuntu 22.04 LTSlibmagickwand-6.q16-6Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.9.0.464Ubuntu 22.04 LTSimagemagickInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.9.0.464Ubuntu 22.04 LTSimagemagick-6-commonInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.9.0.464Ubuntu 22.04 LTSimagemagick-6.q16Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.9.0.464Ubuntu 22.04 LTSlibmagickcore-6.q16-6Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.9.0.464Ubuntu 22.04 LTSlibmagickcore-6.q16-6-extraInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.9.0.464Ubuntu 22.04 LTSlibmagickwand-6.q16-6Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.6.015Ubuntu 22.04 LTSimagemagickInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.6.015Ubuntu 22.04 LTSimagemagick-6-commonInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.6.015Ubuntu 22.04 LTSimagemagick-6.q16Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.6.015Ubuntu 22.04 LTSlibmagickcore-6.q16-6Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.6.015Ubuntu 22.04 LTSlibmagickcore-6.q16-6-extraInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.6.015Ubuntu 22.04 LTSlibmagickwand-6.q16-6Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.5.018Ubuntu 22.04 LTSimagemagickInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.5.018Ubuntu 22.04 LTSimagemagick-6-commonInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.5.018Ubuntu 22.04 LTSimagemagick-6.q16Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.5.018Ubuntu 22.04 LTSlibmagickcore-6.q16-6Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.5.018Ubuntu 22.04 LTSlibmagickcore-6.q16-6-extraInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.5.018Ubuntu 22.04 LTSlibmagickwand-6.q16-6Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.4.038Ubuntu 22.04 LTSimagemagickInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.4.038Ubuntu 22.04 LTSimagemagick-6-commonInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.4.038Ubuntu 22.04 LTSimagemagick-6.q16Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.4.038Ubuntu 22.04 LTSlibmagickcore-6.q16-6Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.4.038Ubuntu 22.04 LTSlibmagickcore-6.q16-6-extraInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.4.038Ubuntu 22.04 LTSlibmagickwand-6.q16-6Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.3.018Ubuntu 22.04 LTSimagemagickInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.3.018Ubuntu 22.04 LTSimagemagick-6-commonInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.3.018Ubuntu 22.04 LTSimagemagick-6.q16Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.3.018Ubuntu 22.04 LTSlibmagickcore-6.q16-6Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.3.018Ubuntu 22.04 LTSlibmagickcore-6.q16-6-extraInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.3.018Ubuntu 22.04 LTSlibmagickwand-6.q16-6Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.2.002Ubuntu 22.04 LTSimagemagickInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.2.002Ubuntu 22.04 LTSimagemagick-6-commonInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.2.002Ubuntu 22.04 LTSimagemagick-6.q16Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.2.002Ubuntu 22.04 LTSlibmagickcore-6.q16-6Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.2.002Ubuntu 22.04 LTSlibmagickcore-6.q16-6-extraInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.2.002Ubuntu 22.04 LTSlibmagickwand-6.q16-6Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.1.007Ubuntu 22.04 LTSimagemagickInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.1.007Ubuntu 22.04 LTSimagemagick-6-commonInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.1.007Ubuntu 22.04 LTSimagemagick-6.q16Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.1.007Ubuntu 22.04 LTSlibmagickcore-6.q16-6Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.1.007Ubuntu 22.04 LTSlibmagickcore-6.q16-6-extraInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.1.007Ubuntu 22.04 LTSlibmagickwand-6.q16-6Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.0.205Ubuntu 22.04 LTSimagemagickInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.0.205Ubuntu 22.04 LTSimagemagick-6-commonInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.0.205Ubuntu 22.04 LTSimagemagick-6.q16Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.0.205Ubuntu 22.04 LTSlibmagickcore-6.q16-6Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.0.205Ubuntu 22.04 LTSlibmagickcore-6.q16-6-extraInternally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending
6.8.0.205Ubuntu 22.04 LTSlibmagickwand-6.q16-6Internally-facing8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14Fix pending

Internally-facing: only accessible when logged into the QuantaStor console/ssh as the qadmin administrative sudo user; generally lower priority. Externally-facing: part of a service the storage platform presents on the network (or the kernel), so potentially reachable over the network.

CVEs

CVE-2026-61866, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-56378, CVE-2026-56379, CVE-2026-56371, CVE-2026-62946, CVE-2026-56370, CVE-2026-61870, CVE-2026-61857, CVE-2026-61465, CVE-2026-56368, CVE-2026-56373, CVE-2026-56366

References

https://ubuntu.com/security/notices/USN-8739-1

https://nvd.nist.gov/vuln/detail/CVE-2026-61866

https://nvd.nist.gov/vuln/detail/CVE-2026-61863

https://nvd.nist.gov/vuln/detail/CVE-2026-61864

https://nvd.nist.gov/vuln/detail/CVE-2026-61865

https://nvd.nist.gov/vuln/detail/CVE-2026-56378

https://nvd.nist.gov/vuln/detail/CVE-2026-56379

https://nvd.nist.gov/vuln/detail/CVE-2026-56371

https://nvd.nist.gov/vuln/detail/CVE-2026-62946

https://nvd.nist.gov/vuln/detail/CVE-2026-56370

https://nvd.nist.gov/vuln/detail/CVE-2026-61870

https://nvd.nist.gov/vuln/detail/CVE-2026-61857

https://nvd.nist.gov/vuln/detail/CVE-2026-61465

https://nvd.nist.gov/vuln/detail/CVE-2026-56368

https://nvd.nist.gov/vuln/detail/CVE-2026-56373

https://nvd.nist.gov/vuln/detail/CVE-2026-56366

Update

Fixes marked Fixed by QuantaStor security update are applied by upgrading QuantaStor with security patches included (Upgrade Manager). Fixed package versions:

PlatformPackageVersion
bionicimagemagick8:6.9.7.4+dfsg-16ubuntu6.15+esm16
Ubuntu 20.04 LTSimagemagick8:6.9.10.23+dfsg-2.1ubuntu11.11+esm14
Ubuntu 22.04 LTSimagemagick8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14
resoluteimagemagick8:7.1.2.18+dfsg1-1ubuntu0.1~esm2
trustyimagemagick8:6.7.7.10-6ubuntu3.13+esm25
xenialimagemagick8:6.8.9.9-7ubuntu5.16+esm24