← All notices | Source (USN-8859-1) | Text version
QSN-8859-1: ImageMagick vulnerabilities
September 30, 2026
Summary
Several security issues were fixed in ImageMagick.
Details
It was discovered that ImageMagick did not correctly handle certain images. An attacker could possibly use this issue to cause a denial of service or obtain sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2026-56367)
It was discovered that ImageMagick did not correctly handle certain images. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-93586)
It was discovered that ImageMagick did not correctly handle certain images. A local attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-93587, CVE-2026-93588)
It was discovered that ImageMagick did not correctly handle certain images. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-93589)
It was discovered that ImageMagick did not correctly handle certain images. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-93590)
Affected QuantaStor releases
| Release | Platform | Package | Exposure | Shipped version | Fixed version | Status |
|---|---|---|---|---|---|---|
| 6.9.1.001 | Ubuntu 22.04 LTS | imagemagick | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.9.1.001 | Ubuntu 22.04 LTS | imagemagick-6-common | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.9.1.001 | Ubuntu 22.04 LTS | imagemagick-6.q16 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.9.1.001 | Ubuntu 22.04 LTS | libmagickcore-6.q16-6 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.9.1.001 | Ubuntu 22.04 LTS | libmagickcore-6.q16-6-extra | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.9.1.001 | Ubuntu 22.04 LTS | libmagickwand-6.q16-6 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.9.0.464 | Ubuntu 22.04 LTS | imagemagick | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.9.0.464 | Ubuntu 22.04 LTS | imagemagick-6-common | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.9.0.464 | Ubuntu 22.04 LTS | imagemagick-6.q16 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.9.0.464 | Ubuntu 22.04 LTS | libmagickcore-6.q16-6 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.9.0.464 | Ubuntu 22.04 LTS | libmagickcore-6.q16-6-extra | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.9.0.464 | Ubuntu 22.04 LTS | libmagickwand-6.q16-6 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.6.015 | Ubuntu 22.04 LTS | imagemagick | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.6.015 | Ubuntu 22.04 LTS | imagemagick-6-common | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.6.015 | Ubuntu 22.04 LTS | imagemagick-6.q16 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.6.015 | Ubuntu 22.04 LTS | libmagickcore-6.q16-6 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.6.015 | Ubuntu 22.04 LTS | libmagickcore-6.q16-6-extra | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.6.015 | Ubuntu 22.04 LTS | libmagickwand-6.q16-6 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.5.018 | Ubuntu 22.04 LTS | imagemagick | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.5.018 | Ubuntu 22.04 LTS | imagemagick-6-common | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.5.018 | Ubuntu 22.04 LTS | imagemagick-6.q16 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.5.018 | Ubuntu 22.04 LTS | libmagickcore-6.q16-6 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.5.018 | Ubuntu 22.04 LTS | libmagickcore-6.q16-6-extra | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.5.018 | Ubuntu 22.04 LTS | libmagickwand-6.q16-6 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.4.038 | Ubuntu 22.04 LTS | imagemagick | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.4.038 | Ubuntu 22.04 LTS | imagemagick-6-common | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.4.038 | Ubuntu 22.04 LTS | imagemagick-6.q16 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.4.038 | Ubuntu 22.04 LTS | libmagickcore-6.q16-6 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.4.038 | Ubuntu 22.04 LTS | libmagickcore-6.q16-6-extra | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.4.038 | Ubuntu 22.04 LTS | libmagickwand-6.q16-6 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.3.018 | Ubuntu 22.04 LTS | imagemagick | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.3.018 | Ubuntu 22.04 LTS | imagemagick-6-common | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.3.018 | Ubuntu 22.04 LTS | imagemagick-6.q16 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.3.018 | Ubuntu 22.04 LTS | libmagickcore-6.q16-6 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.3.018 | Ubuntu 22.04 LTS | libmagickcore-6.q16-6-extra | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.3.018 | Ubuntu 22.04 LTS | libmagickwand-6.q16-6 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.2.002 | Ubuntu 22.04 LTS | imagemagick | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.2.002 | Ubuntu 22.04 LTS | imagemagick-6-common | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.2.002 | Ubuntu 22.04 LTS | imagemagick-6.q16 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.2.002 | Ubuntu 22.04 LTS | libmagickcore-6.q16-6 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.2.002 | Ubuntu 22.04 LTS | libmagickcore-6.q16-6-extra | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.2.002 | Ubuntu 22.04 LTS | libmagickwand-6.q16-6 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.1.007 | Ubuntu 22.04 LTS | imagemagick | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.1.007 | Ubuntu 22.04 LTS | imagemagick-6-common | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.1.007 | Ubuntu 22.04 LTS | imagemagick-6.q16 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.1.007 | Ubuntu 22.04 LTS | libmagickcore-6.q16-6 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.1.007 | Ubuntu 22.04 LTS | libmagickcore-6.q16-6-extra | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.1.007 | Ubuntu 22.04 LTS | libmagickwand-6.q16-6 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.0.205 | Ubuntu 22.04 LTS | imagemagick | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.0.205 | Ubuntu 22.04 LTS | imagemagick-6-common | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.0.205 | Ubuntu 22.04 LTS | imagemagick-6.q16 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.0.205 | Ubuntu 22.04 LTS | libmagickcore-6.q16-6 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.0.205 | Ubuntu 22.04 LTS | libmagickcore-6.q16-6-extra | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
| 6.8.0.205 | Ubuntu 22.04 LTS | libmagickwand-6.q16-6 | Internally-facing | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 | Fix pending |
Internally-facing: only accessible when logged into the QuantaStor console/ssh as the qadmin administrative sudo user; generally lower priority. Externally-facing: part of a service the storage platform presents on the network (or the kernel), so potentially reachable over the network.
CVEs
CVE-2026-93587, CVE-2026-93586, CVE-2026-93590, CVE-2026-56367, CVE-2026-93589, CVE-2026-93588
References
https://ubuntu.com/security/notices/USN-8859-1
https://nvd.nist.gov/vuln/detail/CVE-2026-93587
https://nvd.nist.gov/vuln/detail/CVE-2026-93586
https://nvd.nist.gov/vuln/detail/CVE-2026-93590
https://nvd.nist.gov/vuln/detail/CVE-2026-56367
https://nvd.nist.gov/vuln/detail/CVE-2026-93589
https://nvd.nist.gov/vuln/detail/CVE-2026-93588
Update
Fixes marked Fixed by QuantaStor security update are applied by upgrading QuantaStor with security patches included (Upgrade Manager). Fixed package versions:
| Platform | Package | Version |
|---|---|---|
| bionic | imagemagick | 8:6.9.7.4+dfsg-16ubuntu6.15+esm18 |
| Ubuntu 20.04 LTS | imagemagick | 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16 |
| Ubuntu 22.04 LTS | imagemagick | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 |
| Ubuntu 24.04 LTS | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15 |
| resolute | imagemagick | 8:7.1.2.18+dfsg1-1ubuntu0.1~esm4 |
| trusty | imagemagick | 8:6.7.7.10-6ubuntu3.13+esm27 |
| xenial | imagemagick | 8:6.8.9.9-7ubuntu5.16+esm26 |