QSN-8739-1: ImageMagick vulnerabilities
2026-09-08

Summary:
Several security issues were fixed in ImageMagick.

Details:
It was discovered that ImageMagick incorrectly handled certain images. An
attacker could possibly use this issue to cause a denial of service. This
issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,
Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-56366, CVE-2026-56368,
CVE-2026-56371, CVE-2026-56373)

It was discovered that ImageMagick incorrectly handled certain images. An
attacker could possibly use this issue to cause a denial of service or
execute arbitrary code. This issue only affected Ubuntu 22.04 LTS and
Ubuntu 26.04 LTS. (CVE-2026-56370)

It was discovered that ImageMagick incorrectly handled certain images. An
attacker could possibly use this issue to cause a denial of service or
expose sensitive information. This issue only affected Ubuntu 14.04 LTS,
Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.
(CVE-2026-56378)

It was discovered that ImageMagick incorrectly handled certain images. An
attacker could possibly use this issue to execute arbitrary code. This
issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,
Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-56379)

It was discovered that ImageMagick incorrectly handled memory allocation in
certain operations. An attacker could possibly use this issue to cause a
denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04
LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 26.04 LTS.
(CVE-2026-61465)

It was discovered that ImageMagick incorrectly handled certain images. An
attacker could possibly use this issue to cause a denial of service. This
issue only affected Ubuntu 22.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-61857)

It was discovered that ImageMagick incorrectly handled certain images. An
attacker could possibly use this issue to cause a denial of service.
(CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61870)

It was discovered that ImageMagick incorrectly handled certain images. An
attacker could possibly use this issue to cause a denial of service. This
issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,
Ubuntu 22.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-61866)

It was discovered that ImageMagick incorrectly handled certain images on
32-bit systems. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. This issue only affected Ubuntu 16.04
LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 26.04
LTS. (CVE-2026-62946)

Affected QuantaStor releases:
  6.9.1.001 jammy: imagemagick 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.9.1.001 jammy: imagemagick-6-common 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.9.1.001 jammy: imagemagick-6.q16 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.9.1.001 jammy: libmagickcore-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.9.1.001 jammy: libmagickcore-6.q16-6-extra 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.9.1.001 jammy: libmagickwand-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.9.0.464 jammy: imagemagick 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.9.0.464 jammy: imagemagick-6-common 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.9.0.464 jammy: imagemagick-6.q16 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.9.0.464 jammy: libmagickcore-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.9.0.464 jammy: libmagickcore-6.q16-6-extra 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.9.0.464 jammy: libmagickwand-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.6.015 jammy: imagemagick 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.6.015 jammy: imagemagick-6-common 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.6.015 jammy: imagemagick-6.q16 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.6.015 jammy: libmagickcore-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.6.015 jammy: libmagickcore-6.q16-6-extra 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.6.015 jammy: libmagickwand-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.5.018 jammy: imagemagick 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.5.018 jammy: imagemagick-6-common 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.5.018 jammy: imagemagick-6.q16 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.5.018 jammy: libmagickcore-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.5.018 jammy: libmagickcore-6.q16-6-extra 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.5.018 jammy: libmagickwand-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.4.038 jammy: imagemagick 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.4.038 jammy: imagemagick-6-common 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.4.038 jammy: imagemagick-6.q16 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.4.038 jammy: libmagickcore-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.4.038 jammy: libmagickcore-6.q16-6-extra 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.4.038 jammy: libmagickwand-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.3.018 jammy: imagemagick 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.3.018 jammy: imagemagick-6-common 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.3.018 jammy: imagemagick-6.q16 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.3.018 jammy: libmagickcore-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.3.018 jammy: libmagickcore-6.q16-6-extra 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.3.018 jammy: libmagickwand-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.2.002 jammy: imagemagick 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.2.002 jammy: imagemagick-6-common 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.2.002 jammy: imagemagick-6.q16 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.2.002 jammy: libmagickcore-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.2.002 jammy: libmagickcore-6.q16-6-extra 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.2.002 jammy: libmagickwand-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.1.007 jammy: imagemagick 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.1.007 jammy: imagemagick-6-common 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.1.007 jammy: imagemagick-6.q16 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.1.007 jammy: libmagickcore-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.1.007 jammy: libmagickcore-6.q16-6-extra 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.1.007 jammy: libmagickwand-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.0.205 jammy: imagemagick 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.0.205 jammy: imagemagick-6-common 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.0.205 jammy: imagemagick-6.q16 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.0.205 jammy: libmagickcore-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.0.205 jammy: libmagickcore-6.q16-6-extra 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)
  6.8.0.205 jammy: libmagickwand-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14)

CVEs: CVE-2026-61866, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-56378, CVE-2026-56379, CVE-2026-56371, CVE-2026-62946, CVE-2026-56370, CVE-2026-61870, CVE-2026-61857, CVE-2026-61465, CVE-2026-56368, CVE-2026-56373, CVE-2026-56366

References:
  https://ubuntu.com/security/notices/USN-8739-1