An update for ImageMagick is now available for openEuler-24.03-LTS-SP3 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-2856 Final 1.0 1.0 2026-07-06 Initial 2026-07-06 2026-07-06 openEuler SA Tool V1.0 2026-07-06 ImageMagick security update An update for ImageMagick is now available for openEuler-24.03-LTS-SP3 Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves. Security Fix(es): ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, an integer overflow in the XCF decoder can result in an out of bounds read when a crafted image is read, potentially resulting in a crash. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-53466) ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, the MNG decoder contains a possible heap information disclosure vulnerability because part of the pixels are left unchanged. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-53467) ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, when identifying an image with a crafted 8BIM profile with a specific format string a use-after-free will occur. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-55510) ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-55577) ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a missing depth check in the MVG decoder will result in a stack overflow when a crafted image is provided. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-55594) ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, when providing invalid arguments to the connected-components option an infinite loop will occur. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.(CVE-2026-55595) ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-26, an incorrect handling of arguments can cause a heap buffer over-write in the JP2 encoder. This issue has been fixed in version7.1.2-26.(CVE-2026-55597) In versions prior to 7.1.2-26he, the `-concatenate` operation is missing policy checks, potentially resulting in both reading and writing to paths disallowed by the security policy. This issue has been fixed in version 7.1.2-26.(CVE-2026-55628) An update for ImageMagick is now available for openEuler-24.03-LTS-SP3. openEuler Security has rated this update as having a security impact of medium. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. Medium ImageMagick https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2856 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-53466 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-53467 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-55510 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-55577 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-55594 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-55595 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-55597 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-55628 https://nvd.nist.gov/vuln/detail/CVE-2026-53466 https://nvd.nist.gov/vuln/detail/CVE-2026-53467 https://nvd.nist.gov/vuln/detail/CVE-2026-55510 https://nvd.nist.gov/vuln/detail/CVE-2026-55577 https://nvd.nist.gov/vuln/detail/CVE-2026-55594 https://nvd.nist.gov/vuln/detail/CVE-2026-55595 https://nvd.nist.gov/vuln/detail/CVE-2026-55597 https://nvd.nist.gov/vuln/detail/CVE-2026-55628 openEuler-24.03-LTS-SP3 ImageMagick-7.1.2.26-1.oe2403sp3.aarch64.rpm ImageMagick-c++-7.1.2.26-1.oe2403sp3.aarch64.rpm ImageMagick-c++-devel-7.1.2.26-1.oe2403sp3.aarch64.rpm ImageMagick-debuginfo-7.1.2.26-1.oe2403sp3.aarch64.rpm ImageMagick-debugsource-7.1.2.26-1.oe2403sp3.aarch64.rpm ImageMagick-devel-7.1.2.26-1.oe2403sp3.aarch64.rpm ImageMagick-perl-7.1.2.26-1.oe2403sp3.aarch64.rpm ImageMagick-7.1.2.26-1.oe2403sp3.src.rpm ImageMagick-7.1.2.26-1.oe2403sp3.x86_64.rpm ImageMagick-c++-7.1.2.26-1.oe2403sp3.x86_64.rpm ImageMagick-c++-devel-7.1.2.26-1.oe2403sp3.x86_64.rpm ImageMagick-debuginfo-7.1.2.26-1.oe2403sp3.x86_64.rpm ImageMagick-debugsource-7.1.2.26-1.oe2403sp3.x86_64.rpm ImageMagick-devel-7.1.2.26-1.oe2403sp3.x86_64.rpm ImageMagick-perl-7.1.2.26-1.oe2403sp3.x86_64.rpm ImageMagick-help-7.1.2.26-1.oe2403sp3.noarch.rpm ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, an integer overflow in the XCF decoder can result in an out of bounds read when a crafted image is read, potentially resulting in a crash. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26. 2026-07-06 CVE-2026-53466 openEuler-24.03-LTS-SP3 Medium 6.5 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L ImageMagick security update 2026-07-06 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2856 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, the MNG decoder contains a possible heap information disclosure vulnerability because part of the pixels are left unchanged. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26. 2026-07-06 CVE-2026-53467 openEuler-24.03-LTS-SP3 Medium 5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N ImageMagick security update 2026-07-06 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2856 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, when identifying an image with a crafted 8BIM profile with a specific format string a use-after-free will occur. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26. 2026-07-06 CVE-2026-55510 openEuler-24.03-LTS-SP3 Medium 5.5 AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H ImageMagick security update 2026-07-06 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2856 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26. 2026-07-06 CVE-2026-55577 openEuler-24.03-LTS-SP3 Medium 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H ImageMagick security update 2026-07-06 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2856 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a missing depth check in the MVG decoder will result in a stack overflow when a crafted image is provided. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26. 2026-07-06 CVE-2026-55594 openEuler-24.03-LTS-SP3 Medium 5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L ImageMagick security update 2026-07-06 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2856 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, when providing invalid arguments to the connected-components option an infinite loop will occur. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26. 2026-07-06 CVE-2026-55595 openEuler-24.03-LTS-SP3 Medium 4.7 AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H ImageMagick security update 2026-07-06 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2856 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-26, an incorrect handling of arguments can cause a heap buffer over-write in the JP2 encoder. This issue has been fixed in version7.1.2-26. 2026-07-06 CVE-2026-55597 openEuler-24.03-LTS-SP3 Medium 5.5 AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H ImageMagick security update 2026-07-06 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2856 In versions prior to 7.1.2-26he, the `-concatenate` operation is missing policy checks, potentially resulting in both reading and writing to paths disallowed by the security policy. This issue has been fixed in version 7.1.2-26. 2026-07-06 CVE-2026-55628 openEuler-24.03-LTS-SP3 Medium 6.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N ImageMagick security update 2026-07-06 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2856