QSN-8859-1: ImageMagick vulnerabilities
2026-09-30

Summary:
Several security issues were fixed in ImageMagick.

Details:
It was discovered that ImageMagick did not correctly handle certain images.
An attacker could possibly use this issue to cause a denial of service or
obtain sensitive information. This issue only affected Ubuntu 16.04 LTS,
Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS.
(CVE-2026-56367)

It was discovered that ImageMagick did not correctly handle certain images.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2026-93586)

It was discovered that ImageMagick did not correctly handle certain images.
A local attacker could possibly use this issue to cause a denial of
service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS,
Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-93587, CVE-2026-93588)

It was discovered that ImageMagick did not correctly handle certain images.
An attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04
LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-93589)

It was discovered that ImageMagick did not correctly handle certain images.
An attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 26.04 LTS. (CVE-2026-93590)

Affected QuantaStor releases:
  6.9.1.001 jammy: imagemagick 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.9.1.001 jammy: imagemagick-6-common 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.9.1.001 jammy: imagemagick-6.q16 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.9.1.001 jammy: libmagickcore-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.9.1.001 jammy: libmagickcore-6.q16-6-extra 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.9.1.001 jammy: libmagickwand-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.9.0.464 jammy: imagemagick 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.9.0.464 jammy: imagemagick-6-common 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.9.0.464 jammy: imagemagick-6.q16 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.9.0.464 jammy: libmagickcore-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.9.0.464 jammy: libmagickcore-6.q16-6-extra 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.9.0.464 jammy: libmagickwand-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.6.015 jammy: imagemagick 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.6.015 jammy: imagemagick-6-common 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.6.015 jammy: imagemagick-6.q16 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.6.015 jammy: libmagickcore-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.6.015 jammy: libmagickcore-6.q16-6-extra 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.6.015 jammy: libmagickwand-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.5.018 jammy: imagemagick 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.5.018 jammy: imagemagick-6-common 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.5.018 jammy: imagemagick-6.q16 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.5.018 jammy: libmagickcore-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.5.018 jammy: libmagickcore-6.q16-6-extra 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.5.018 jammy: libmagickwand-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.4.038 jammy: imagemagick 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.4.038 jammy: imagemagick-6-common 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.4.038 jammy: imagemagick-6.q16 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.4.038 jammy: libmagickcore-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.4.038 jammy: libmagickcore-6.q16-6-extra 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.4.038 jammy: libmagickwand-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.3.018 jammy: imagemagick 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.3.018 jammy: imagemagick-6-common 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.3.018 jammy: imagemagick-6.q16 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.3.018 jammy: libmagickcore-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.3.018 jammy: libmagickcore-6.q16-6-extra 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.3.018 jammy: libmagickwand-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.2.002 jammy: imagemagick 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.2.002 jammy: imagemagick-6-common 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.2.002 jammy: imagemagick-6.q16 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.2.002 jammy: libmagickcore-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.2.002 jammy: libmagickcore-6.q16-6-extra 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.2.002 jammy: libmagickwand-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.1.007 jammy: imagemagick 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.1.007 jammy: imagemagick-6-common 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.1.007 jammy: imagemagick-6.q16 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.1.007 jammy: libmagickcore-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.1.007 jammy: libmagickcore-6.q16-6-extra 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.1.007 jammy: libmagickwand-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.0.205 jammy: imagemagick 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.0.205 jammy: imagemagick-6-common 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.0.205 jammy: imagemagick-6.q16 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.0.205 jammy: libmagickcore-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.0.205 jammy: libmagickcore-6.q16-6-extra 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)
  6.8.0.205 jammy: libmagickwand-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5 (fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16)

CVEs: CVE-2026-93587, CVE-2026-93586, CVE-2026-93590, CVE-2026-56367, CVE-2026-93589, CVE-2026-93588

References:
  https://ubuntu.com/security/notices/USN-8859-1