Debian Patches
Status for imagemagick/8:7.1.1.43+dfsg1-1+deb13u14
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| CVE-2026-24485_1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pqgj-2p96-rx85 a PCD file does not contain a valid Sync marker, the DecodeImage() function becomes trapped in an infinite loop while searching for the Sync marker, causing the program to become unresponsive and continuously consume CPU resources, ultimately leading to system resource exhaustion and denial of service. (cherry picked from commit 332c1566acc2de77857032d3c2504ead6210ff50) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/332c1566acc2de77857032d3c2504ead6210ff50 | 2026-01-22 |
| CVE-2026-24485_2.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pqgj-2p96-rx85 a PCD file does not contain a valid Sync marker, the DecodeImage() function becomes trapped in an infinite loop while searching for the Sync marker, causing the program to become unresponsive and continuously consume CPU resources, ultimately leading to system resource exhaustion and denial of service. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/55c344f4b514213642da41194bab57b4476fb9f5 | 2026-01-22 |
| CVE-2026-25576.patch | Fixed out of bounds read in multiple coders that read raw pixel data (GHSA-jv4p-gjwq-9r2j) | Dirk Lemstra <dirk@lemstra.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/077b42643212d7da8c1a4f6b2cd0067ebca8ec0f | 2026-01-25 |
| CVE-2026-25637.patch | Fixed possible memory leak (GHSA-gm37-qx7w-p258) (cherry picked from commit 30ce0e8efbd72fd6b50ed3a10ae22f57c8901137) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/30ce0e8efbd72fd6b50ed3a10ae22f57c8901137 | 2026-02-04 |
| CVE-2026-25638.patch | Fixed memory leak when writing MSL files (GHSA-gxcx-qjqp-8vjw) (cherry picked from commit 1e88fca11c7b8517100d518bc99bd8c474f02f88) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/1e88fca11c7b8517100d518bc99bd8c474f02f88 | 2026-02-03 |
| CVE-2026-25794.patch | Prevent out of bounds heap write in uhdr encoder (https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vhqj-f5cj-9x8h) (cherry picked from commit ffe589df5ff8ce1433daa4ccb0d2a9fadfbe30ed) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/ffe589df5ff8ce1433daa4ccb0d2a9fadfbe30ed | 2026-02-06 |
| CVE-2026-25795.patch | Fixed NULL pointer dereference in ReadSFWImage (GHSA-p33r-fqw2-rqmm) (cherry picked from commit 0c7d0b9671ae2616fca106dcada45536eb4df5dc) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/0c7d0b9671ae2616fca106dcada45536eb4df5dc | 2026-02-06 |
| 0001-Use-modern-idiom-for-autoconf.patch | Use modern idiom for autoconf | Bastien ROUCARIÈS <roucaries.bastien@gmail.com> | invalid | 2015-09-15 | ||
| 0002-Allow-distribution-to-custumize-the-html-pointer-to-.patch | Allow distribution to custumize the html pointer to documentation Allow to say on debian system you might install the imagemagick-doc package |
Bastien ROUCARIÈS <roucaries.bastien@gmail.com> | invalid | debian | 2018-02-02 | |
| CVE-2026-25796.patch | Prevent memory leak in early exits (GHSA-g2pr-qxjg-7r2w) (cherry picked from commit 93ad259ce4f6d641eea0bee73f374af90f35efc3) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/93ad259ce4f6d641eea0bee73f374af90f35efc3 | 2026-02-06 |
| 0003-Improve-man-page-to-use-version-information-and-quan.patch | Improve man page to use version information and quantum Use ls *.in |sed 's,[.]1.in,,g' |xargs -n1 sh -c 'sed -i "s,$1(1),$1-im@MAGICK_MAJOR_VERSION@.@MAGICK_ABI_SUFFIX_LC@(1),g" *.in' sedtest use ls *.in |sed 's,[.]1.in,,g' |xargs -n1 sh -c 'sed -i "s,fB$1,fB$1-im@MAGICK_MAJOR_VERSION@.@MAGICK_ABI_SUFFIX_LC@,g" *.in' sedtest use ls *.in |sed 's,[.]1.in,,g' |xargs -n1 sh -c 'sed -i "s,.TH $1,.TH $1-im@MAGICK_MAJOR_VERSION@.@MAGICK_ABI_SUFFIX_LC@,g" *.in' sedtest |
Bastien ROUCARIÈS <roucaries.bastien@gmail.com> | no | 2017-03-21 | ||
| 0004-Embeds-date-dependent-on-timezone.patch | Embeds date dependent on timezone Use date -u and dpkg-parsechangelog |
Vagrant Cascadian <vagrant@reproducible-builds.org> | yes | debian | 2021-08-30 | |
| 0005-Add-a-debian-policy.patch | Add a debian policy Install also other policy |
Bastien Roucariès <rouca@debian.org> | no | 2023-10-21 | ||
| 0006-html-DOCTYPE-in-upper-case.patch | html DOCTYPE in upper case find . -name '*.html' -exec sed -i 's,[!]doctype ,!DOCTYPE ,g' {} \; |
Bastien Roucariès <rouca@debian.org> | not-needed | 2024-12-29 | ||
| 0007-html-remove-cache-line.patch | html remove cache line find . -name '*.html' -exec sed -ip 's,^[<][!]-- Magick Cache.*$,,g' {} \; ease apply patches |
Bastien Roucariès <rouca@debian.org> | not-needed | 2024-12-29 | ||
| 0008-Fix-br-tag.patch | Fix br tag find . -path './.git' -prune -o -type 'f' -name '*.html' -exec sed -i 's,<br>,<br />,g' {} \; |
Bastien ROUCARIÈS <roucaries.bastien@gmail.com> | invalid | 2018-02-02 | ||
| 0009-Fix-api-Image-.html.patch | Fix api/Image++.html | Bastien ROUCARIÈS <roucaries.bastien@gmail.com> | invalid | 2016-12-14 | ||
| 0010-Fix-www-api-mophologie.html.patch | Fix www/api/mophologie.html | Bastien ROUCARIÈS <roucaries.bastien@gmail.com> | invalid | 2016-12-14 | ||
| 0011-Fix-www-command-line-options.html.patch | Fix www/command-line-options.html | Bastien ROUCARIÈS <roucaries.bastien@gmail.com> | invalid | 2016-12-14 | ||
| 0012-Fix-remaining-error-in-html-files.patch | Fix remaining error in html files | Bastien ROUCARIÈS <roucaries.bastien@gmail.com> | no | 2017-03-18 | ||
| 0013-Fix-html-error-in-api-Image-.html.patch | Fix html error in api/Image++.html | Bastien ROUCARIÈS <roucaries.bastien@gmail.com> | invalid | 2017-08-11 | ||
| 0014-Fix-instead-of-lt-and-input-form.patch | Fix < instead of < and input form | Bastien ROUCARIÈS <roucaries.bastien@gmail.com> | invalid | 2018-02-03 | ||
| 0015-Fix-another-errors-in-html-files.patch | Fix another errors in html files | Bastien ROUCARIÈS <roucaries.bastien@gmail.com> | invalid | 2018-03-19 | ||
| 0016-Fix-a-few-html-error.patch | Fix a few html error | Bastien Roucariès <rouca@debian.org> | invalid | 2020-07-26 | ||
| 0017-Fix-a-typo-in-manpage.patch | Fix a typo in manpage | Bastien Roucariès <rouca@debian.org> | no | 2020-07-27 | ||
| 0018-Finalize-fixing-error-in-html.patch | Finalize fixing error in html | Bastien Roucariès <rouca@debian.org> | no | 2021-01-11 | ||
| 0019-Fix-www-Magick-index.html.patch | Fix www/Magick++/index.html | Bastien Roucariès <rouca@debian.org> | not-needed | 2023-06-18 | ||
| 0020-Add-input-end-tag.patch | Add input end tag sed -i -e 's,<input \([^>/]*[^/]\)>,<input \1 />,g' *.html |
Bastien Roucariès <rouca@debian.org> | not-needed | 2023-06-18 | ||
| 0021-Fix-another-html-file.patch | Fix another html file | Bastien Roucariès <rouca@debian.org> | not-needed | 2023-06-18 | ||
| 0022-Fix-remaining-http-error.patch | Fix remaining http error | Bastien Roucariès <rouca@debian.org> | not-needed | 2023-06-18 | ||
| 0023-Fix-html-error-in-6.9.12.98-dfsg1.patch | Fix html error in 6.9.12.98+dfsg1 | Bastien Roucariès <rouca@debian.org> | not-needed | 2023-10-10 | ||
| 0024-Fix-remaining-of-html-error.patch | Fix remaining of html error | Bastien Roucariès <rouca@debian.org> | invalid | 2023-11-01 | ||
| 0025-Add-missing-link-flags.patch | Add missing link flags | Bastien Roucariès <rouca@debian.org> | yes | 2023-11-05 | ||
| 0026-New-fix-of-html.patch | New fix of html | Bastien Roucariès <rouca@debian.org> | not-needed | 2023-12-26 | ||
| 0027-Remove-spurious-div.patch | Remove spurious div | Bastien Roucariès <rouca@debian.org> | not-needed | 2024-06-05 | ||
| 0028-Remove-spurious-div.patch | Remove spurious div | Bastien Roucariès <rouca@debian.org> | not-needed | 2024-06-05 | ||
| 0029-Remove-deprecation-warning.patch | Remove deprecation warning For debian it is too early to warn user |
Bastien Roucariès <rouca@debian.org> | not-needed | 2024-06-26 | ||
| 0030-Fix-remaining-www-error.patch | Fix remaining www error | Bastien Roucariès <rouca@debian.org> | not-needed | 2024-10-27 | ||
| 0031-Remove-adsbygoogle-script.patch | Remove adsbygoogle script find . -name '*.html' -exec sed -ip 's,^.*js/adsbygoogle.js.*$,,g' {} \; |
Bastien Roucariès <rouca@debian.org> | not-needed | 2024-12-29 | ||
| 0032-Remove-cse-script.patch | Remove cse script find . -name '*.html' -exec sed -ip 's,^.*localhost/cse.js.*$,,g' {} \; |
Bastien Roucariès <rouca@debian.org> | not-needed | 2024-12-29 | ||
| 0033-Fix-remaining-html-error.patch | Fix remaining html error | Bastien Roucariès <rouca@debian.org> | not-needed | 2024-12-29 | ||
| 0034-Fix-html-error-1034333.patch | Fix html error #1034333 find . -name '*.html' -exec sed -ip 's,^.*src=["]https://github.com/sponsors/ImageMagick/button["].*$,,g' {} \; |
Bastien Roucariès <rouca@debian.org> | no | debian | 2024-12-29 | |
| CVE-2025-43965.patch | Update the image depth after this has been changed by SetQuantumFormat. | Dirk Lemstra <dirk@lemstra.org> | no | https://github.com/ImageMagick/ImageMagick/commit/bac413a26073923d3ffb258adaab07fb3fe8fdc9 | 2025-02-08 | |
| CVE-2025-46393.patch | multispectral MIFF images renders all channels in arbitrary order | Cristy <urban-warrior@imagemagick.org> | no | https://github.com/ImageMagick/ImageMagick/commit/81ac8a0d2eb21739842ed18c48c7646b7eef65b8 | 2025-02-07 | |
| CVE-2025-53014.patch | Correct out of bounds read of a single byte. | Dirk Lemstra <dirk@lemstra.org> | yes | debian upstream | https://github.com/ImageMagick/ImageMagick/commit/29d82726c7ec20c07c49ba263bdcea16c2618e03 | 2025-06-26 |
| CVE-2025-53015_1.patch | Added extra checks to make sure we don't get stuck in the while loop. | Dirk Lemstra <dirk@lemstra.org> | yes | debian upstream | https://github.com/ImageMagick/ImageMagick/commit/229fa96a988a21d78318bbca61245a6ed1ee33a0 | 2025-05-02 |
| CVE-2025-53015_2.patch | Added missing return. | Dirk Lemstra <dirk@lemstra.org> | yes | debian upstream | https://github.com/ImageMagick/ImageMagick/commit/38631605e6ab744548a561797472cf8648bcfe26 | 2025-05-12 |
| CVE-2025-53101.patch | [PATCH] https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qh3h-j545-h8c9 | Cristy <urban-warrior@imagemagick.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/66dc8f51c11b0ae1f1cdeacd381c3e9a4de69774 | 2025-06-27 |
| CVE-2025-53019.patch | Fixed memory leak when entering StreamImage multiple times. | Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/fc3ab0812edef903bbb2473c0ee652ddfd04fe5c | 2025-06-27 |
| CVE-2025-55004.patch | CVE-2025-55004 | Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/55d97055e00a7bc7ae2776c99824002fbb4a72aa | 2025-08-07 |
| CVE-2025-55005.patch | CVE-2025-55005 | Cristy <urban-warrior@imagemagick.org> | yes | upstream | 2025-08-07 | |
| CVE-2025-55154.patch | CVE-2025-55154 | Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/db986e4782e9f6cc42a0e50151dc4fe43641b337 | 2025-08-09 |
| statistic-private.patch | Private alias for easing backport | ImageMagick Packaging Team | no | backport, https://github.com/ImageMagick/ImageMagick/commit/7e5d87fe6e92b6cc3e96d5175974626317512dd9 | 2025-09-07 | |
| CVE-2025-55212_1.patch | CVE-2025-55212 Added checks for invalid with or height to ThumbnailImage (https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-fh55-q5pj-pxgw) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/43d92bf855155e8e716ecbb50ed94c2ed41ff9f6.patch | 2025-08-14 |
| CVE-2025-55212_2.patch | CVE-2025-55212 [backport] * include private header |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/5f0bcf986b8b5e90567750d31a37af502b73f2af | 2025-08-17 |
| CVE-2025-55298-pre1.patch | CVE-2025-55298 prepare Crop filename pattern %03d no longer works in ImageMagick 7 |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/82550750ec8f79393b381c3ed349dd495bbab8a7 | 2025-07-19 |
| CVE-2025-55298-pre2.patch | CVE-2025-55298 prepare don't forget the end filename segment |
Cristy <urban-warrior@imagemagick.org> | no | https://github.com/ImageMagick/ImageMagick/commit/d46d1e5be71c865f674f27ec1031a871c1cc48ab | 2025-07-19 | |
| CVE-2025-55298-pre3.patch | CVE-2025-55298 prepare more boundary checks (cherry picked from commit 6c7c8d5866b9c0ce6cc76a741e05b9482716101e) |
Cristy <urban-warrior@imagemagick.org> | no | https://github.com/ImageMagick/ImageMagick/commit/6c7c8d5866b9c0ce6cc76a741e05b9482716101e | 2025-07-19 | |
| CVE-2025-55298-1.patch | [1/2] CVE-2025-55298 (cherry picked from commit 1f93323df9d8c011c31bc4c6880390071f7fb895) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/1f93323df9d8c011c31bc4c6880390071f7fb895 | 2025-08-17 |
| CVE-2025-55298-2.patch | [2/2] CVE-2025-55298 (cherry picked from commit 439b362b93c074eea6c3f834d84982b43ef057d5) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/439b362b93c074eea6c3f834d84982b43ef057d5 | 2025-08-17 |
| CVE-2025-57803.patch | CVE-2025-57803 | Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/2c55221f4d38193adcb51056c14cf238fbcc35d7 | 2025-08-23 |
| CVE-2025-57807.patch | CVE-2025-57807 | Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/077a417a19a5ea8c85559b602754a5b928eef23e | 2025-08-24 |
| CVE-2025-62171.patch | Added extra check to resolve issue on 32-bit systems (https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9pp9-cfwx-54rm) | Dirk Lemstra <dirk@lemstra.org> | yes | debian upstream | https://github.com/ImageMagick/ImageMagick/commit/cea1693e2ded51b4cc91c70c54096cbed1691c00 | 2025-10-12 |
| CVE-2025-62594.patch | CVE-2025-62594 [backport] In order to ease backport minimise difference of image-private.h and add compat wrapper (cherry picked from commit 7b47fe369eda90483402fcd3d78fa4167d3bb129) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/7b47fe369eda90483402fcd3d78fa4167d3bb129 | 2025-10-18 |
| CVE-2025-65955.patch | Correct incorrect free (GHSA-q3hc-j9x5-mp9m) | Dirk Lemstra <dirk@lemstra.org> | no | debian | https://github.com/ImageMagick/ImageMagick/commit/6f81eb15f822ad86e8255be75efad6f9762c32f8 | 2025-11-23 |
| CVE-2025-66628.patch | Added extra check to avoid an overflow on 32-bit machines (GHSA-6hjr-v6g4-3fm8) | Dirk Lemstra <dirk@lemstra.org> | no | debian | https://github.com/ImageMagick/ImageMagick/commit/bdae0681ad1e572defe62df85834218f01e6d670 | 2025-12-02 |
| CVE-2025-68618.patch | CVE-2025-68618 | Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/6f431d445f3ddd609c004a1dde617b0a73e60beb | 2025-12-21 |
| CVE-2025-68950_pre1.patch | vid: format not supported in vector graphics [backport] - strictly not needed but a good idea to remove unsupported vector graphics format - hardening from a security point of view |
Cristy <urban-warrior@imagemagick.org> | no | https://github.com/ImageMagick/ImageMagick/commit/678372c9b4c6bad5bbcf998d5eca506103f587eb | 2025-02-09 | |
| CVE-2025-68950.patch | CVE-2025-68950 (cherry picked from commit 204718c2211903949dcfc0df8e65ed066b008dec) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/204718c2211903949dcfc0df8e65ed066b008dec | 2025-12-26 |
| CVE-2025-69204.patch | CVE-2025-69204 (cherry picked from commit 2c08c2311693759153c9aa99a6b2dcb5f985681e) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/2c08c2311693759153c9aa99a6b2dcb5f985681e | 2025-12-27 |
| CVE-2026-22770.patch | Correct memset initialization and add an overflow check (GHSA-39h3-g67r-7g3c) | Dirk Lemstra <dirk@lemstra.org> | yes | debian upstream | https://github.com/ImageMagick/ImageMagick/commit/3e0330721020e0c5bb52e4b77c347527dd71658e | 2026-01-04 |
| CVE-2026-23874.patch | MSL: Stack overflow via infinite recursion in ProcessMSLScript (cherry picked from commit 2a09644b10a5b146e0a7c63b778bd74a112ebec3) |
Cristy <urban-warrior@imagemagick.org> | yes | debian upstream | https://github.com/ImageMagick/ImageMagick/commit/2a09644b10a5b146e0a7c63b778bd74a112ebec3 | 2026-01-15 |
| CVE-2026-25797_1.patch | Prevent code injection via PostScript header (https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rw6c-xp26-225v) (cherry picked from commit 26088a83d71e9daa203d54a56fe3c31f3f85463d) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/26088a83d71e9daa203d54a56fe3c31f3f85463d | 2026-02-06 |
| CVE-2026-23876.patch | Added overflow checks to prevent an out of bounds write (https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r49w-jqq3-3gx8) (cherry picked from commit 2fae24192b78fdfdd27d766fd21d90aeac6ea8b8) |
Dirk Lemstra <dirk@lemstra.org> | yes | debian upstream | https://github.com/ImageMagick/ImageMagick/commit/2fae24192b78fdfdd27d766fd21d90aeac6ea8b8 | 2026-01-18 |
| CVE-2026-23952.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5vx3-wx4q-6cj8 (cherry picked from commit 1eefab41bc0ab1c6c2c1fd3e4a49e3ee1849751d) |
Cristy <urban-warrior@imagemagick.org> | yes | debian upstream | https://github.com/ImageMagick/ImageMagick/commit/1eefab41bc0ab1c6c2c1fd3e4a49e3ee1849751d | 2026-01-15 |
| CVE-2026-24481.patch | Initialize the pixels with empty values to prevent possible heap information disclosure (GHSA-96pc-27rx-pr36) (cherry picked from commit 51c9d33f4770cdcfa1a029199375d570af801c97) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/51c9d33f4770cdcfa1a029199375d570af801c97 | 2026-01-23 |
| CVE-2026-25797_2.patch | Properly escape the strings that are written as raw html (GHSA-rw6c-xp26-225v) (cherry picked from commit 81129f79ad622ff4c1d729828a34ab0f49ec89f6) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/81129f79ad622ff4c1d729828a34ab0f49ec89f6 | 2026-02-20 |
| CVE-2026-24484_1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wg3g-gvx5-2pmv Magick fails to check for multi-layer nested mvg conversions to svg, leading to DoS (cherry picked from commit 0349df6d43d633bd61bb582d1e1e87d6332de32a) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/0349df6d43d633bd61bb582d1e1e87d6332de32a | 2026-01-23 |
| CVE-2026-24484_2.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wg3g-gvx5-2pmv Magick fails to check for multi-layer nested mvg conversions to svg, leading to DoS (cherry picked from commit f4525ad83d3876a9a07b74ef1fed4cb21a5332dd) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/f4525ad83d3876a9a07b74ef1fed4cb21a5332dd | 2026-01-24 |
| CVE-2026-25798.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-p863-5fgm-rgq4 a NULL pointer dereference in ClonePixelCacheRepository allows a remote attacker to crash any application linked against ImageMagick by supplying a crafted image file, resulting in denial of service. (cherry picked from commit 16dd3158ce197c6f65e7798a7a5cc4538bb0303e) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/16dd3158ce197c6f65e7798a7a5cc4538bb0303e | 2026-02-01 |
| CVE-2026-53466.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pjxj-pchx-4c3m (cherry picked from commit 47ca7210515f3c9ea033b86fe4323a70caa74468) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/47ca7210515f3c9ea033b86fe4323a70caa74468 | 2026-06-05 |
| CVE-2026-46692.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-p93h-f2jc-477j Heap Buffer Over-Write in distributed pixel cache server An attacker who can connect to a magick -distribute-cache service can cause a heap buffer over-write in the server process. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/75bcc76eac8b26ce0d6900117c9b308b0aed5719 | 2026-05-14 |
| CVE-2026-25799.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-543g-8grm-9cw6 a logic error in YUV sampling factor validation allows an invalid sampling factor to bypass checks and trigger a division-by-zero during image loading, resulting in a reliable denial-of-service. (cherry picked from commit 412f3c8bc1d3b6890aad72376cd992c9b5177037) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/412f3c8bc1d3b6890aad72376cd992c9b5177037 | 2026-01-31 |
| CVE-2026-25897.patch | Added extra check to prevent out of bounds heap write on 32-bit systems (GHSA-6j5f-24fw-pqp4) (cherry picked from commit 23fde73188ea32c15b607571775d4f92bdb75e60) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/23fde73188ea32c15b607571775d4f92bdb75e60 | 2026-02-06 |
| CVE-2026-25898_1.patch | Fixed out of bound read with negative pixel index (GHSA-vpxv-r9pg-7gpr) (cherry picked from commit c9c87dbaba56bf82aebd3392e11f0ffd93709b12) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/c9c87dbaba56bf82aebd3392e11f0ffd93709b12 | 2026-02-06 |
| CVE-2026-25898_2.patch | Fixed out of bound read with negative pixel index (GHSA-vpxv-r9pg-7gpr) (cherry picked from commit 21525d8f27b86e8063fe359616086fd6b71eb05b) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/21525d8f27b86e8063fe359616086fd6b71eb05b | 2026-02-08 |
| CVE-2026-25965.patch | Prevent path traversal of paths that are blocked in the security policy (GHSA-8jvj-p28h-9gm7) (cherry picked from commit 4a9dc1075dcad3ab0579e1b37dbe854c882699a5) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/4a9dc1075dcad3ab0579e1b37dbe854c882699a5 | 2026-02-03 |
| CVE-2026-25966.patch | Block reading from fd: in our more secure policies by default (GHSA-xwc6-v6g8-pw2h) (cherry picked from commit 8d4c67a90ae458fb36393a05c0069e9123ac174c) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/8d4c67a90ae458fb36393a05c0069e9123ac174c | 2026-02-03 |
| CVE-2026-25967.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-72hf-fj62-w6j4 a stack-based buffer overflow exists in the ImageMagick FTXT image reader. A crafted FTXT file can cause out-of-bounds writes on the stack, leading to a crash. (cherry picked from commit 9afe96cc325da1e4349fbd7418675af2f8708c10) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/9afe96cc325da1e4349fbd7418675af2f8708c10 | 2026-01-31 |
| CVE-2026-25968.patch | Patch to resolve possible out of bounds write in the msl decoder (GHSA-3mwp-xqp2-q6ph). (cherry picked from commit 56f02958890b820cf2d0a6ecb04eb6f58ea75628) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/56f02958890b820cf2d0a6ecb04eb6f58ea75628 | 2026-02-03 |
| CVE-2026-46693_1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4g75-9r48-jf92 Race Condition in distributed pixel cache server can result in file descriptor hijacking An attacker who can connect to a magick -distribute-cache service can hijack a file descriptor in the server process when a race condition is met. [backport] - adaptation needed due to fix of CVE-2026-46692 |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/adb4b8d7e1e4014892b71837842326c96c2a625b | 2026-05-14 |
| CVE-2026-46693_2.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4g75-9r48-jf92 Race Condition in distributed pixel cache server can result in file descriptor hijacking An attacker who can connect to a magick -distribute-cache service can hijack a file descriptor in the server process when a race condition is met. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/99711276aefec757dabb28ea8bf85bf504a0888c | 2026-05-14 |
| CVE-2026-25969.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xgm3-v4r9-wfgm a memory leak exists in `coders/ashlar.c`. The `WriteASHLARImage` allocates a structure. However, when an exception is thrown, the allocated memory is not properly released, resulting in a potential memory leak. (cherry picked from commit a253d1b124ebdcc2832daac6f9a35c362635b40e) [backport] - do not change border parameters, keep old parameter in patch context |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/a253d1b124ebdcc2832daac6f9a35c362635b40e | 2026-01-28 |
| CVE-2026-25970_pre1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xg29-8ghv-v4x This fix int to size_t and is needed for fully fix CVE-2026-25970 (cherry picked from commit 266e59ed8d886a76355c863bd38ff5ac34537673) |
Cristy <urban-warrior@imagemagick.org> | no | backport, https://github.com/ImageMagick/ImageMagick/commit/266e59ed8d886a76355c863bd38ff5ac34537673 | 2026-01-28 | |
| CVE-2026-46693_3.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4g75-9r48-jf92 Race Condition in distributed pixel cache server can result in file descriptor hijacking An attacker who can connect to a magick -distribute-cache service can hijack a file descriptor in the server process when a race condition is met. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/d954e9c48a7b2bdb76f0c9a3f8bc0e22071288e6 | 2026-05-14 |
| CVE-2026-47165_CVE-2026-47166.patch | validate the DPC pixel cache on read (cherry picked from commit bb79e91155127dd6c3c18a01c8761e9c2ea82d70) [debian] This fix CVE-2026-4716[56] |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/bb79e91155127dd6c3c18a01c8761e9c2ea82d70 | 2026-05-16 |
| CVE-2026-25970.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xg29-8ghv-v4xr (cherry picked from commit 729253dc16e1a1ec4cac891a12d597e3fa9336b3) a signed integer overflow vulnerability in ImageMagick's SIXEL decoder allows an attacker to trigger memory corruption and denial of service when processing a maliciously crafted SIXEL image file. The vulnerability occurs during buffer reallocation operations where pointer arithmetic using signed 32-bit integers overflows |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/729253dc16e1a1ec4cac891a12d597e3fa9336b3 | 2026-02-01 |
| CVE-2026-25971.patch | Keep a splay tree of read files to prevent a stack overflow (GHSA-8mpr-6xr2-chhc) (cherry picked from commit 9313e530b37272b748898febd42b5949756f0179) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/9313e530b37272b748898febd42b5949756f0179 | 2026-02-03 |
| CVE-2026-25982.patch | Added checks to prevent an out of bounds read (GHSA-pmq6-8289-hx3v) (cherry picked from commit 4e1f5381d4ccbb6b71927e94c5d257fa883b3af7) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/4e1f5381d4ccbb6b71927e94c5d257fa883b3af7 | 2026-02-03 |
| CVE-2026-25983_1.patch | No longer allow mutations on the first image of the list (GHSA-fwqw-2x5x-w566) (cherry picked from commit b4f8e1a387dd1d0a0af516071831a235f2fdf437) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/b4f8e1a387dd1d0a0af516071831a235f2fdf437 | 2026-01-25 |
| CVE-2026-25983_2.patch | Run checks before accessing the image (GHSA-fwqw-2x5x-w566). (cherry picked from commit 257200cb21de23404dce5f8261871845d425dee5) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/257200cb21de23404dce5f8261871845d425dee5 | 2026-01-26 |
| CVE-2026-48724.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2hhq-c99x-492r (cherry picked from commit 017c7efe4d63b953b35ab96fc0939ba3620e4739) when using an image with mask the Floyd-Steinberg dithering method it will cause a negative heap buffer over-write |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/017c7efe4d63b953b35ab96fc0939ba3620e4739 | 2026-05-18 |
| CVE-2026-25985.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v7g2-m8c5-mf84 a crafted SVG file containing an malicious element causes ImageMagick to attempt to allocate ~674 GB of memory, leading to an out-of-memory abort. (cherry picked from commit 1a51eb9af00c36724660e294520878fd1f13e312) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/1a51eb9af00c36724660e294520878fd1f13e312 | 2026-02-07 |
| CVE-2026-25986.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mqfc-82jx-3mr2 A heap buffer overflow write vulnerability exists in ReadYUVImage() (coders/yuv.c) when processing malicious YUV 4:2:2 (NoInterlace) images. (cherry picked from commit b9c80ad3ca802b6883da25f153c4fdf72c017eba) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/b9c80ad3ca802b6883da25f153c4fdf72c017eba | 2026-02-07 |
| CVE-2026-25987.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-42p5-62qq-mmh7 a heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding (cherry picked from commit bbae0215e1b76830509fd20e6d37c0dd7e3e4c3a) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/bbae0215e1b76830509fd20e6d37c0dd7e3e4c3a | 2026-02-07 |
| CVE-2026-25988.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-782x-jh29-9mf7 sometimes msl.c fails to update the stack index, so an image is stored in the wrong slot and never freed on error, causing leaks (cherry picked from commit 4354fc1d554ec2e6314aed13536efa7bde9593d2) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/4354fc1d554ec2e6314aed13536efa7bde9593d2 | 2026-02-07 |
| CVE-2026-25989_pre1.patch | https://github.com/ImageMagick/ImageMagick/issues/8556 (cherry picked from commit 4403defdd4e23f98d40ab21dda38f20e5d51e09f) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/403defdd4e23f98d40ab21dda38f20e5d51e09f | 2026-02-04 |
| CVE-2026-25989.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7355-pwx2-pm84 A crafted SVG file can cause a denial of service. An off-by-one boundary check (`>` instead of `>=`) that allows bypass the guard and reach an undefined `(size_t)` cast (cherry picked from commit 5a545ab9d6c3d12a6a76cfed32b87df096729d95) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/5a545ab9d6c3d12a6a76cfed32b87df096729d95 | 2026-02-07 |
| CVE-2026-26066.patch | Fixed possible infinite loop (GHSA-v994-63cg-9wj3) | Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/880057ce34f6da9dff2fe3b290bbbc45b743e613 ( | 2026-02-12 |
| CVE-2026-26283.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gwr3-x37h-h84v a `continue` statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails (cherry picked from commit c448c6920a985872072fc7be6034f678c087de9b) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/c448c6920a985872072fc7be6034f678c087de9b | 2026-02-13 |
| CVE-2026-26284.patch | Corrected loop initialization to prevent out of bounds read (GHSA-wrhr-rf8j-r842) (cherry picked from commit 0c9ffcf55763e5daf1b61dfed0deed1aa43e217f) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/0c9ffcf55763e5daf1b61dfed0deed1aa43e217f | 2026-01-27 |
| CVE-2026-26983.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w8mw-frc6-r7m8 the MSL interpreter crashes when processing a invalid `<map>` element that causes it to use an image after it has been freed (cherry picked from commit 7cfae4da24a995fb05386d77364ff404a7cca7bc) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/7cfae4da24a995fb05386d77364ff404a7cca7bc | 2026-02-16 |
| CVE-2026-27798.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qpgx-jfcq-r59f A heap buffer over-read vulnerability occurs when processing an image with small dimension using the `-wavelet-denoise` operator. (cherry picked from commit 0377e60b3c0d766bd7271221c95d9ee54f6a3738) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/0377e60b3c0d766bd7271221c95d9ee54f6a3738 | 2026-02-17 |
| CVE-2026-27799.patch | Corrected type to avoid an overflow (GHSA-r99p-5442-q2x2) (cherry picked from commit e87695b3227978ad70b967b8d054baaf8ac2cced) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/e87695b3227978ad70b967b8d054baaf8ac2cced | 2026-02-10 |
| CVE-2026-28493_1.patch | Corrected typecast to avoid an out of bounds write (GHSA-r39q-jr8h-gcq2) (cherry picked from commit 6cefe972445185cbb9c76651231d52512e0ec14b) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/6cefe972445185cbb9c76651231d52512e0ec14b | 2026-02-28 |
| CVE-2026-28493_2.patch | Added checks for overflows. (cherry picked from commit 47a803cc139a6eebf14fca5f1d5dd25c7782cc98) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/47a803cc139a6eebf14fca5f1d5dd25c7782cc98 | 2026-02-28 |
| CVE-2026-28493_3.patch | Add overflow check to sixel write path (#8587) (cherry picked from commit cd7acd2c4bea5c953fae062d9ce43d11374dcb60) |
Jake Lodwick <jakelodwick@users.noreply.github.com> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/cd7acd2c4bea5c953fae062d9ce43d11374dcb60 | 2026-03-01 |
| CVE-2026-28494.patch | Added checks to avoid possible stack corruption (GHSA-932h-jw47-73jm) (cherry picked from commit a3f2f8680fa01cbce731191789322419efb5954a) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/a3f2f8680fa01cbce731191789322419efb5954a | 2026-02-28 |
| CVE-2026-28686.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-467j-76j7-5885 A heap-buffer-overflow vulnerability exists in the PCL encode due to an undersized output buffer allocation (cherry picked from commit d622bd6023310d57cec1e8f265095a1979210371) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/d622bd6023310d57cec1e8f265095a1979210371 | 2026-02-22 |
| CVE-2026-28687.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-fpvf-frm6-625q (cherry picked from commit 3392b4bba6ce076f4d88f5653a42d97b7e4f6970) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/3392b4bba6ce076f4d88f5653a42d97b7e4f6970 | 2026-02-10 |
| CVE-2026-28689_pre1.patch | Introduce a utf8_close define so we can use _close on Windows. (cherry picked from commit 6d9f9f978ff53a75cff0555e8bae51edc4d87d1b) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/6d9f9f978ff53a75cff0555e8bae51edc4d87d1b | 2025-06-06 |
| CVE-2026-28689_1.patch | partial TOCTOU patch: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-493f-jh8w-qhx3 (cherry picked from commit 3eb11260cfe84fddbdcb8d2ed47f92703d1b2987) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/3eb11260cfe84fddbdcb8d2ed47f92703d1b2987 | 2026-02-20 |
| CVE-2026-28689_2.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-493f-jh8w-qhx3 (cherry picked from commit 753ffb699934331b31028d4e271f2f6d6db85074) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/753ffb699934331b31028d4e271f2f6d6db85074 | 2026-02-22 |
| CVE-2026-28690.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7h7q-j33q-hvpf a stack buffer overflow vulnerability exists in the MNG encoder. (cherry picked from commit e6e874875e48dd9838acca3bd22c14a4d2f1b3ca) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/e6e874875e48dd9838acca3bd22c14a4d2f1b3ca | 2026-02-22 |
| CVE-2026-28691.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wj8w-pjxf-9g4f an uninitialized pointer dereference vulnerability exists in the JBIG decoder due to a missing check. (cherry picked from commit 87f619bcd066a3c8e8fae4addb99f15d496ae881) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/87f619bcd066a3c8e8fae4addb99f15d496ae881 | 2026-02-22 |
| CVE-2026-28692.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mrmj-x24c-wwcv MAT decoder uses 32-bit arithmetic due to incorrect parenthesization resulting in a heap over-read. (cherry picked from commit cb6cc0611baa4dac59add6439fa1d8af33fc5927) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/cb6cc0611baa4dac59add6439fa1d8af33fc5927 | 2026-02-22 |
| CVE-2026-28693_pre1.patch | https://gist.github.com/mescuwa/9197f4317a69559cdf87d0bfab6fa473 (cherry picked from commit 8f0a198216a701779b7b8784512b0f90613a801f) |
Cristy <urban-warrior@imagemagick.org> | no | https://github.com/ImageMagick/ImageMagick/commit/8f0a198216a701779b7b8784512b0f90613a801f | 2025-08-23 | |
| CVE-2026-28693_1.patch | Add overflow checks to BMP/DIB write paths and DIB read path (#8573) (cherry picked from commit 33375f93a866830bbaf72f86314fbc3014b9e4c4) |
Jake Lodwick <jakelodwick@users.noreply.github.com> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/33375f93a866830bbaf72f86314fbc3014b9e4c4 | 2026-02-28 |
| CVE-2026-28693_2.patch | Added extra check. (cherry picked from commit 50a0c0d7ebbac39d9eef9d1ef13262861945451c) bug; https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hffp-q43q-qq76 |
Dirk Lemstra <dirk@lemstra.org> | no | https://github.com/ImageMagick/ImageMagick/commit/50a0c0d7ebbac39d9eef9d1ef13262861945451c | 2026-03-01 | |
| CVE-2026-30883.patch | Added extra check to prevent overflow that could result in a heap over-write (GHSA-qmw5-2p58-xvrc) (cherry picked from commit 5897fb65d173a57729026321d5067c9ddca5c56f) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/5897fb65d173a57729026321d5067c9ddca5c56f | 2026-03-06 |
| CVE-2026-30929.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rqq8-jh93-f4vg MagnifyImage uses a fixed-size stack buffer. When using a specific image it is possible to overflow this buffer and corrupt the stack (cherry picked from commit adf831c442b7dc37da04d73331aba26e388eeb9a) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/adf831c442b7dc37da04d73331aba26e388eeb9a | 2026-03-03 |
| CVE-2026-30931_pre1.patch | Corrected previous patch and added more overflow checks. (cherry picked from commit 31f10b1de591ee71179542a6d06e6885cbafdf71) |
Dirk Lemstra <dirk@lemstra.org> | no | https://github.com/ImageMagick/ImageMagick/commit/31f10b1de591ee71179542a6d06e6885cbafdf71 | 2026-02-08 | |
| CVE-2026-30931.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h95r-c8c7-mrwx a heap-based buffer overflow in the UHDR encoder can happen due to truncation of a value and it would allow an out of bounds write (cherry picked from commit 7fe4dbabe5d50057513d5d16eb9cbfa0734b4848) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/7fe4dbabe5d50057513d5d16eb9cbfa0734b4848 | 2026-03-04 |
| CVE-2026-30935.patch | fix heap over-read in BilateralBlurImage with even-dimension kernels (#8595) The mirrored pixel mapping (mid.x-u, mid.y-v) accesses buffer position (2*mid - u). For even width 2k, mid=k, so u=0 accesses column 2k=width which is one past the buffer end. Reverse the mapping to (u-mid.x, v-mid.y) and use signed arithmetic at all three call sites. (cherry picked from commit ed448e879285db99d2c1207393822713acb510f2) |
ylwango613 <128395302+ylwango613@users.noreply.github.com> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/ed448e879285db99d2c1207393822713acb510f2 | 2026-03-03 |
| CVE-2026-30936.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5ggv-92r5-cp4p a crafted image could cause an out of bounds heap write inside the WaveletDenoiseImage method (cherry picked from commit ffbbd7201e0ba08707849c0053aa703e076bf86e) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/ffbbd7201e0ba08707849c0053aa703e076bf86e | 2026-03-03 |
| CVE-2026-30937.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qpg4-j99f-8xcg a 32-bit unsigned integer overflow in the XWD (X Windows) encoder can cause an undersized heap buffer allocation. (cherry picked from commit 134f1c17d5dafc565182f9b00304fc08cfa3184e) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/134f1c17d5dafc565182f9b00304fc08cfa3184e | 2026-02-28 |
| CVE-2026-31853.patch | Corrected the overflow check that can cause issues on 32-bit systems (GHSA-56jp-jfqg-f8f4) (cherry picked from commit 7936d9c7bec4bd459a8d4b5304a1a6fbf7dac0ea) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/7936d9c7bec4bd459a8d4b5304a1a6fbf7dac0ea | 2026-03-02 |
| CVE-2026-32259.patch | Added extra check to prevent out of bounds write when color reduction fails (GHSA-49hx-7656-jpg3) (cherry picked from commit df934b4721173f8dda33c6d007f9811669640e86) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/df934b4721173f8dda33c6d007f9811669640e86 | 2026-03-07 |
| msl-fix_pre1.patch | =?utf-8?q?standards=E2=80=91compliant_thread_id_string?= (cherry picked from commit efd91b90c2d974ea098412f08ddc3aa93eeb2d05) |
Cristy <urban-warrior@imagemagick.org> | no | https://github.com/ImageMagick/ImageMagick/commit/efd91b90c2d974ea098412f08ddc3aa93eeb2d05 | 2026-02-14 | |
| msl-fix_pre2.patch | eliminate compiler warning (cherry picked from commit 7b0899bb0a0105bedfaf8b865474a713e8f0f1d6) |
Cristy <urban-warrior@imagemagick.org> | no | https://github.com/ImageMagick/ImageMagick/commit/7b0899bb0a0105bedfaf8b865474a713e8f0f1d6 | 2026-02-14 | |
| msl-fix_pre3.patch | private method name change (cherry picked from commit 8f3c54fb804112cf5336e927917574f223ae89fa) [backport] - no svg and msl change (see next patch) |
Cristy <urban-warrior@imagemagick.org> | no | backport, https://github.com/ImageMagick/ImageMagick/commit/8f3c54fb804112cf5336e927917574f223ae89fa | 2026-02-15 | |
| msl-fix_pre4.patch | Add MagickSscanf | Bastien Roucariès <rouca@debian.org> | no | https://sources.debian.org/src/imagemagick/8%3A7.1.2.16%2Bdfsg1-1/MagickCore/string-private.h#L28 | 2026-03-16 | |
| msl-svg-coder-port-to-7.1.2-16.patch | Port to msl/svg coder to 7.1.2-16 This fix CVE-2026-28688 and other msl CVEs |
Bastien Roucariès <rouca@debian.org> | no | https://sources.debian.org/src/imagemagick/8%3A7.1.2.16%2Bdfsg1-1/coders/svg.c | 2026-03-16 | |
| msl-fix-post1.patch | Add private method MagickSafeReciprocal | Bastien Roucariès <rouca@debian.org> | no | backport, https://github.com/ImageMagick/ImageMagick/commit/7e5d87fe6e92b6cc3e96d5175974626317512dd9 | 2026-03-16 | |
| CVE-2026-32636.patch | Corrected out of bounds write of a single zero byte (GHSA-gc62-2v5p-qpmp) (cherry picked from commit 361b42c91d173cfb4bd8f39898c599feef6a1e55) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/361b42c91d173cfb4bd8f39898c599feef6a1e55 | 2026-03-13 |
| CVE-2026-48734.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h36c-3666-h489 (cherry picked from commit 9ee821731faee8c4cc44103cc4180854046bb13c) a crafted MVG file could result in a stack overflow due to a missing depth or visited-set check. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/9ee821731faee8c4cc44103cc4180854046bb13c | 2026-05-18 |
| CVE-2026-33535.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mw3m-pqr2-qv7c An out-of-bounds write of a zero byte exists in the X11 `display` interaction path that could lead to a crash (cherry picked from commit d3af057fb9d3666762ca3731c2360f544f607f88) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/d3af057fb9d3666762ca3731c2360f544f607f88 | 2026-03-21 |
| CVE-2026-33536.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8793-7xv6-82cf (cherry picked from commit ee4468a8ab0635fcaa9c561e583c56ada3b1b721) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/ee4468a8ab0635fcaa9c561e583c56ada3b1b721 | 2026-03-20 |
| CVE-2026-48994.patch | Added extra checks to prevent an overflow on 32-bit systems (GHSA-4v89-6mgq-6rgc) (cherry picked from commit 44df3a54af31b8d33fa5e40b4dc61d051c4a5d9a) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/44df3a54af31b8d33fa5e40b4dc61d051c4a5d9a | 2026-05-24 |
| CVE-2026-33899.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cr67-pvmx-2pp2 when `Magick` parses an XML file it is possible that a single zero byte is written out of the bounds. (cherry picked from commit ae679e2fd19ec656bfab9f822ae4cf06bf91604d) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/ae679e2fd19ec656bfab9f822ae4cf06bf91604d | 2026-03-24 |
| CVE-2026-33900.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v67w-737x-v2c9 the viff encoder contains an integer truncation/wraparound issue on 32-bit builds that could trigger an out of bounds heap write, potentially causing a crash. (cherry picked from commit d27b840a61b322419a66d0d192ff56d52498148d) [backport] - fix a typo in if |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/d27b840a61b322419a66d0d192ff56d52498148d | 2026-03-24 |
| CVE-2026-33901.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-x9h5-r9v2-vcww A heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image. (cherry picked from commit 4c72003e9e54a4ebaa938d239e75f5d285527ebe) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/4c72003e9e54a4ebaa938d239e75f5d285527ebe | 2026-03-24 |
| CVE-2026-33902.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f4qm-vj5j-9xpw a stack overflow vulnerability in ImageMagick's FX expression parser allows an attacker to crash the process by providing a deeply nested expression. (cherry picked from commit d3c0a37485314c5ccef72efb18f3847cd53868ba) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/d3c0a37485314c5ccef72efb18f3847cd53868ba | 2026-03-24 |
| CVE-2026-33905.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pcvx-ph33-r5vv The -sample operation has an out of bounds read when an specific offset is set through the `sample:offset` define that could lead to an out of bounds read. (cherry picked from commit cca607366fb38c2dde019a9088b8415ffba3a835) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/cca607366fb38c2dde019a9088b8415ffba3a835 | 2026-03-24 |
| CVE-2026-33908.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-fwvm-ggf6-2p4x Magick frees the memory of the XML tree via the `DestroyXMLTree()` function; however, this process is executed recursively with no depth limit imposed. When Magick processes an XML file with deeply nested structures, it will exhaust the stack memory, resulting in a Denial of Service (DoS) attack. (cherry picked from commit ccdc01180276aa2cb3d4a32a611aa4f417061cd8) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/ccdc01180276aa2cb3d4a32a611aa4f417061cd8 | 2026-03-24 |
| CVE-2026-34238.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-26qp-ffjh-2x4v an integer overflow in the despeckle operation causes a heap buffer overflow on 32-bit builds that will result in an out of bounds write (cherry picked from commit bcd8519c70ecd9ebbc180920f2cf97b267d1f440) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/bcd8519c70ecd9ebbc180920f2cf97b267d1f440 | 2026-03-25 |
| CVE-2026-49218.patch | Added missing check for returning an image with zero columns or rows (https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8pj9-6897-74xc) (cherry picked from commit 84fbcef8a558b1da075417a89d29aa5632d57f63) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/84fbcef8a558b1da075417a89d29aa5632d57f63 | 2026-05-22 |
| CVE-2026-40169.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5592-p365-24xh A crafted image could result in an out of bounds heap write when writing a yaml or json output, resulting in a crash. (cherry picked from commit f86452a8aea37bf2b4bd36127f836dcc5f138b38) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/f86452a8aea37bf2b4bd36127f836dcc5f138b38 | 2026-04-08 |
| CVE-2026-40169_pre1.patch | Add overflow check to JXL write path (#8591) (cherry picked from commit c6b16f54864a065fa0b7878f3bfe1949cb1380ed) |
Jake Lodwick <jakelodwick@users.noreply.github.com> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/c6b16f54864a065fa0b7878f3bfe1949cb1380ed | 2026-03-02 |
| CVE-2026-40183.patch | Patch to correct the sample size for 16 bit floats in the JXL encoder (GHSA-jvgr-9ph5-m8v4) | Dirk Lemstra <dirk@lemstra.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/1c7767fc5f822c6edc104c1220d523e96fa20b5a | 2026-04-09 |
| CVE-2026-40310.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pwg5-6jfc-crvh Imagemagick contains a heap out-of-bounds write in the JP2 encoder with when a user specifies an invalid sampling index (cherry picked from commit 3d653bea2df085c728a1c8f775808e1e9249dff9) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/3d653bea2df085c728a1c8f775808e1e9249dff9 | 2026-04-09 |
| CVE-2026-49219.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xcjm-wqff-m669 An incorrect parsing of the filename can result in a policy bypass and read files disallowed by a security policy using a symlink. [backport] - backport policy from 7.1.2.25 - drop unrelated token changes bug:https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xcjm-wqff-m669 |
Cristy <urban-warrior@imagemagick.org> | no | https://github.com/ImageMagick/ImageMagick/commit/d1bf6bcf357fef944280263892dadf84fbb2211d | 2026-05-22 | |
| CVE-2026-40311.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r83h-crwp-3vm7 a heap use-after-free vulnerability was found that can cause a crash when reading and printing values from an invalid XMP profile (cherry picked from commit 5facfecf1abb3fed46a08f614dcc43d1e548e20d) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/5facfecf1abb3fed46a08f614dcc43d1e548e20d | 2026-04-09 |
| CVE-2026-40312.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5xg3-585r-9jh5 an off by one error in the MSL decoder could result in a crash when a malicous MSL file is read. (cherry picked from commit 2a06c7be3bba3326caf8b7a8d1fa2e0d4b88998d) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/2a06c7be3bba3326caf8b7a8d1fa2e0d4b88998d | 2026-04-09 |
| CVE-2026-53460.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q62c-h75r-2xhc A missing check for maximum memory request in AcquireAlignedMemory could trigger an out-of-Memory condition. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/960367f3318e650ba8544c0ce3844d7897aba43b | 2026-05-28 |
| CVE-2026-53461.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g22q-f7gc-5jhr an incorrect loop in the ICON decoder can result in an out of bounds heap write resulting in a crash (cherry picked from commit 1db660b5c6725421c1212ecc88b4e2fa0b68703f) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/1db660b5c6725421c1212ecc88b4e2fa0b68703f | 2026-05-29 |
| CVE-2026-42050.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7mxf-ff4f-jj7p a malicious MIFF file could trigger an overflow when a user opens it in the display tool and right-clicks a tile to invoke the Load / Update menu item. (cherry picked from commit 25980041f145afc621233a1c050291231b627c48) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/25980041f145afc621233a1c050291231b627c48 | 2026-04-18 |
| CVE-2026-42326.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7wff-wpr6-vmhm Heap Buffer Over-Read in IPTC encoder |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/06301590988fc62e17b4ae6e937d411cc1089ef1 | 2026-04-25 |
| CVE-2026-45031.patch | Added missing check for the list length limit in the PSD decoder (GHSA-cwpj-h54c-xjpx) | Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/a96763d717e27d6d136aa734d1cf4b33a91555d0 | 2026-05-05 |
| CVE-2026-45358.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cr6r-hmj8-pr7r Heap Buffer Over-Read of a single byte in meta encoder (cherry picked from commit 2cf3b5750bd7c96fbb92c3f02823ecd63f8dd232) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/2cf3b5750bd7c96fbb92c3f02823ecd63f8dd232 | 2026-05-09 |
| CVE-2026-45359.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vhrh-72hq-w8m7 Heap Buffer Over-Read in connected components when the user supplies an invalid keep-top define |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/9f18e2890088705c9a3dc867a7f2e31be50b8f41 | 2026-05-09 |
| CVE-2026-33901_bug420_1.patch | https://github.com/ImageMagick/ImageMagick6/issues/420 CVE-2026-33901 patch breaks rendering |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/50507967ae868d7d159057bb08897091bc4800a8 | 2026-04-25 |
| CVE-2026-33901_bug420_2.patch | https://github.com/ImageMagick/ImageMagick6/issues/420 CVE-2026-33901 patch breaks rendering | Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/ab89688f34618fba733275ff718a6088c463ba4c | 2026-04-27 |
| CVE-2026-45624.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pfvh-m9xv-8966 Heap Buffer Over-Read of 24 bytes in distort operation. (cherry picked from commit a66ab7bc559f041b1434606496b5b4b0906ff9a2) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/a66ab7bc559f041b1434606496b5b4b0906ff9a2 | 2026-05-10 |
| CVE-2026-45664_1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g5mf-wqq5-vwg6 Policy Bypass in MNG decoder Because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use. (cherry picked from commit 6dc0130dbbde34b13126bc4fe25789f894b9e0c1) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/6dc0130dbbde34b13126bc4fe25789f894b9e0c1 | 2026-05-11 |
| CVE-2026-45664_2.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g5mf-wqq5-vwg6 Policy Bypass in MNG decoder Because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use. (cherry picked from commit 10a1a2285659fe1f8978f338319727dfda19500d) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/10a1a2285659fe1f8978f338319727dfda19500d | 2026-05-11 |
| CVE-2026-46520.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-36wm-hprc-mcf5 Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions When reading multiple images with different dimensions an out of bounds heap write can occur. (cherry picked from commit 3aa35741316909f9e384d13cee197334dc3296d7) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/3aa35741316909f9e384d13cee197334dc3296d7 | 2026-05-12 |
| CVE-2026-46521_pre1.patch | Small refactor in setting the packet_size when the number_meta_channels is not zero. (cherry picked from commit 0f920c21a2edaaee7a6c00670072109424b76661) |
Dirk Lemstra <dirk@lemstra.org> | no | https://github.com/ImageMagick/ImageMagick/commit/0f920c21a2edaaee7a6c00670072109424b76661 | 2025-02-08 | |
| CVE-2026-46521.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jcqp-6r6f-3mfx Heap Buffer Over-Write in MIFF encoder when using LZMA compression When using LZMA compression in the MIFF encoder an out of bounds write can occur due to a missing check. (cherry picked from commit 188fcf538f58a60109ebd008e2c40d29cf3966d7) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/188fcf538f58a60109ebd008e2c40d29cf3966d7 | 2026-05-12 |
| CVE-2026-46522.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7gg8-qqx7-92g5 Infinite Loop in the MIFF decoder can lead to CPU exhaustion Due to a missing check in the MIFF decoder a crafted file could cause an infinite loop resulting in CPU exhaustion. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/e8431d4a282013851cb698fdf29b1d7ad80ad7cb | 2026-05-13 |
| CVE-2026-46523.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5r4x-w6p5-222q (cherry picked from commit 4d92249c84536a20e9723376ec016b4950dcb454) Use-After-Free in MSL decoder A crafted MSL image can trigger a heap-use-after-free. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/4d92249c84536a20e9723376ec016b4950dcb454 | 2026-05-13 |
| CVE-2026-46557.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rcr6-g7jc-f57g (cherry picked from commit 06fb1aa7589f4eec363b33c2bbda5986a92bb259) Stack overflow in fx operation Due to a missing depth check a stack overflow can occur in the fx operation by passing a crafted argument. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/06fb1aa7589f4eec363b33c2bbda5986a92bb259 | 2026-05-14 |
| CVE-2026-53463.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-p9rq-q46c-g4x6 (cherry picked from commit aa288f3023da9ad9e0d85563d76ea7e1cb58abed) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/aa288f3023da9ad9e0d85563d76ea7e1cb58abed | 2026-05-31 |
| CVE-2026-46559.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-533m-3wf6-c33v Heap Buffer Over-Write of a single byte in the JP2 encoder An incorrect check in the JP2 will result in an heap buffer over-write of a single byte when specifying certain options. (cherry picked from commit ff2f155f2874737380a80195c5849a2f06cb6ff7) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/ff2f155f2874737380a80195c5849a2f06cb6ff7 | 2026-05-13 |
| CVE-2026-53464.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j989-f892-2335 (cherry picked from commit 310e325e65f5171f35ec6305c9c21ec253d80852) bug; https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j989-f892-2335 |
Cristy <urban-warrior@imagemagick.org> | no | backport, https://github.com/ImageMagick/ImageMagick/commit/310e325e65f5171f35ec6305c9c21ec253d80852 | 2026-05-31 | |
| CVE-2026-53467.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8g53-9m3c-69xg#advisory-comment-224693 The MNG decoder contains a possible heap information disclosure vulnerability because part of the pixels are left unchanged. (cherry picked from commit 9d1764c43a15b78e18a7f66649989d59079a9e15) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/9d1764c43a15b78e18a7f66649989d59079a9e15 | 2026-06-07 |
| draw-7.1.2-26.patch | Update MagickCore/draw.c to 7.1.2.26 This will close at least CVE-2026-55577, CVE-2026-55594 |
Bastien Roucariès <rouca@debian.org> | no | https://github.com/ImageMagick/ImageMagick/blob/7.1.2-26/MagickCore/draw.c | 2026-07-03 | |
| draw-7.1.2-26-post1.patch | Post backport fix for 7.1.2-26 of MagickCore/draw.c | Bastien Roucariès <rouca@debian.org> | no | 2026-07-03 | ||
| CVE-2026-62946.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h22j-f9xw-xjjm processing an extremely large JNX file on 32-bit platforms can cause an integer overflow, leading to a heap buffer over-write. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/538ad18f3a421d1dd9629baa747eebc137c32b67 | 2026-06-27 |
| CVE-2026-64685.patch | Make sure we check the length after each read (GHSA-7rgw-xg25-prjm) (cherry picked from commit 093f476e985d61557ea75ad0ef30d491dff816f3) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/093f476e985d61557ea75ad0ef30d491dff816f3 | 2026-07-02 |
| CVE-2026-55595.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qhmf-7fc4-8q3h when providing invalid arguments to the connected-components option an infinite loop will occur. (cherry picked from commit 549fdf2195bbac1c93e736c04f416d4d9a5d05a8) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/549fdf2195bbac1c93e736c04f416d4d9a5d05a8 | 2026-06-13 |
| CVE-2026-55597.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-c4v7-w88g-m6c4 (cherry picked from commit 277541927c2de8317d4167ee16d57375f24971d3) an incorrect handling of arguments can cause a heap buffer over-write in the JP2 encoder. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/277541927c2de8317d4167ee16d57375f24971d3 | 2026-06-13 |
| CVE-2026-55628-pre1.patch | Backport function is_symlink_utf8 | Bastien Roucariès <rouca@debian.org> | no | https://github.com/ImageMagick/ImageMagick/blob/7.1.2-26/MagickCore/utility-private.h#L85C1-L102C1 | 2026-07-03 | |
| CVE-2026-55628-pre2.patch | Backport IsPathAuthorized Drop previous patch definition |
Bastien Roucariès <rouca@debian.org> | no | https://github.com/ImageMagick/ImageMagick/blob/7.1.2-26/MagickCore/policy-private.h#L44C1-L52C1 | 2026-07-03 | |
| CVE-2026-55628-pre3.patch | Backport ThrowPolicyException(tag,status) | Bastien Roucariès <rouca@debian.org> | no | https://github.com/ImageMagick/ImageMagick/blob/c74cd62cb55a7290f0d7f75bf723456b9260be25/MagickCore/exception-private.h#L69-L75 | 2026-07-03 | |
| CVE-2026-55628-pre4.patch | Export a policy symbol | Bastien Roucariès <rouca@debian.org> | no | 2026-07-03 | ||
| CVE-2026-55628.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-82mp-vp5c-9pf7 (cherry picked from commit dcba7ee9ffb0c5a22a458bf0c613bc818fcb4cc6) the `-concatenate` operation is missing policy checks, potentially resulting in both reading and writing to paths disallowed by the security policy [backport] - use #define for MagickPathAuthorised bug; https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-82mp-vp5c-9pf7 |
Cristy <urban-warrior@imagemagick.org> | no | backport, https://github.com/ImageMagick/ImageMagick/commit/dcba7ee9ffb0c5a22a458bf0c613bc818fcb4cc6 | 2026-06-14 | |
| CVE-2026-56361.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q8h3-jv9v-57qx Attackers can trigger heap buffer overflow by providing incorrect morphology parameters causing single pixel memory access violations. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/a6bfb1bb7b4017ec52f5a957641d83ce29b63286 | 2026-03-25 |
| CVE-2026-56363.patch | Set a limit to the kernel order to avoid an overflow resulting in a divide by zero (GHSA-vf33-6r7x-66xx) (cherry picked from commit d67eef71764cfeca07b4edf8a8ae922180f5f2e4) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/d67eef71764cfeca07b4edf8a8ae922180f5f2e4 | 2026-05-03 |
| CVE-2026-56364_1.patch | Fixed memory leak that happens when someone creates a corrupt ImagemagickOpenCLDeviceProfile.xml file (GHSA-qp59-x883-77qv) (cherry picked from commit 951f6b0940224afc469f6a72503d6e011c688d02) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/951f6b0940224afc469f6a72503d6e011c688d02 | 2026-01-12 |
| CVE-2026-56364_2.patch | Allow null value when calling RelinquishDeviceBenchmark. (cherry picked from commit 5fd4e5ad05a986b00e1519fa308ca3c5cf3d09d8) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/5fd4e5ad05a986b00e1519fa308ca3c5cf3d09d8 | 2026-01-24 |
| CVE-2026-56365.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-x928-4434-crqj A memory leak vulnerability in the PNG encoder when writing MNG images. Attackers can trigger the encoder failure condition to exhaust memory resources and cause denial of service. (cherry picked from commit ca761f220bbf0470e2e7967639bcfb5be305ad28) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/ca761f220bbf0470e2e7967639bcfb5be305ad28 | 2026-04-09 |
| CVE-2026-56367.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-273h-m46v-96q4 An integer overflow in the PSB (PSD v2) RLE decoding path (ReadPSDChannelRLE in coders/psd.c) that causes a heap out-of-bounds read on 32-bit builds. Processing a crafted PSB file can lead to information disclosure or a crash. (cherry picked from commit 5b91ab69af614024255fd93dcc9a62b41fbc435c) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/5b91ab69af614024255fd93dcc9a62b41fbc435c7 | 2026-01-24 |
| CVE-2026-56368.patch | Fixed possible memory leak in multiple coders that write raw pixel data (GHSA-wfx3-6g53-9fgc) (cherry picked from commit fe0a49a58ac5b7a18ff2618b6207dcad71123e43) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/fe0a49a58ac5b7a18ff2618b6207dcad71123e43 | 2026-02-07 |
| CVE-2026-62363_1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-422r-8c97-xcg4 a heap buffer over-write can occur in the fx operation by passing a crafted argument. (cherry picked from commit be99ffaa57c8f91ed8897c2221ff0940c561a368) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/be99ffaa57c8f91ed8897c2221ff0940c561a368 | 2026-06-22 |
| CVE-2026-56370.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pmpg-6pww-fg6q (cherry picked from commit 2ab24d74865ab92faeeefe0fec890abf1e88e57c) an out-of-bounds access vulnerability in ConnectedComponentsImage() when processing connected-components artifacts with invalid indices. Attackers can trigger access violations by specifying malformed connected-components definitions via CLI, causing denial of service or potential code execution. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/2ab24d74865ab92faeeefe0fec890abf1e88e57c | 2026-04-01 |
| CVE-2026-56371.patch | Fixed possible memory leak (GHSA-3q5f-gmjc-38r8) (cherry picked from commit e6394098af39a9689bb5f0b4eb6a9968e449a8d3) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/e6394098af39a9689bb5f0b4eb6a9968e449a8d3 | 2026-02-06 |
| CVE-2026-56376.patch | Corrected possible use after free when allocation fails (GHSA-2gq3-ww97-wfjm) (cherry picked from commit f5049954f12c6fcf090a776767526d2a4708d58b) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/f5049954f12c6fcf090a776767526d2a4708d58b | 2026-02-20 |
| CVE-2026-56377.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gm48-c7f2-v67p ImageMagick contains an incorrect policy check that allows attackers to create or truncate files disallowed by security policies. Remote attackers can bypass path policy restrictions in sandboxed conversion services to write arbitrary files outside intended boundaries. (cherry picked from commit 3705205e1424d379c2fc46c026c8560ccea0509e) [backport] - do not change policy.c part already backported from 7.1.2-26 - add includes |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/3705205e1424d379c2fc46c026c8560ccea0509e | 2026-05-20 |
| CVE-2026-56378_pre1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-x2j6-6h5m-gjg4 (cherry picked from commit 13e1eac8ce533e96da10054edd3930bbcf07ce71) ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap out-of-bounds read in the PCD coder's DecodeImage loop. A crafted PCD file can trigger a one-byte heap out-of-bounds read during image decoding, resulting in denial of service and potential disclosure of an adjacent heap byte. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/13e1eac8ce533e96da10054edd3930bbcf07ce71 | 2026-02-07 |
| CVE-2026-56378.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wgxp-q8xq-wpp9 ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap out-of-bounds read in the PCD coder's DecodeImage loop. A crafted PCD file can trigger a one-byte heap out-of-bounds read during image decoding, resulting in denial of service and potential disclosure of an adjacent heap byte. (cherry picked from commit 436e5d2589e3c0adc10d9aa189e81d5d088d8207) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/436e5d2589e3c0adc10d9aa189e81d5d088d8207 | 2026-02-13 |
| CVE-2026-56362.patch | reset channel map when cache resources are exhausted (cherry picked from commit 364606e5cb955b622b13015814e255e1dadd701b) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/364606e5cb955b622b13015814e255e1dadd701b | 2026-02-07 |
| CVE-2026-56372.patch | https://github.com/ImageMagick/security/advisories/GHSA-8vfj-q2cp-5m5j a heap buffer overflow vulnerability in the magnify operation that allows attackers to read out of bounds memory. An unrecognized magnify:method value triggers an out of bounds read, potentially exposing sensitive information or causing denial of service. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/8f6b59383ce65d839ad3e2aa578d5d7a7dd1d0ec | 2026-03-25 |
| CVE-2026-56366.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9r56-3gjq-hqf7 a memory leak vulnerability in the META reader when processing APP1JPEG input paths. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/bee248ee853a686a969fae9cfb1e02dd5aae245b | 2026-03-20 |
| CVE-2026-62363_2.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-422r-8c97-xcg4 (cherry picked from commit 0bbf7e48f5dd0ef540d3ae1ae8dfc6cd036fb640) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/0bbf7e48f5dd0ef540d3ae1ae8dfc6cd036fb640 | 2026-06-22 |
| CVE-2026-56373.patch | Write after we have checked if the realloc failed (GHSA-3j4x-rwrx-xxj9) (cherry picked from commit 168ffe18def968f886c023146a478897866fd621) use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory allocation fails. Attackers can trigger this vulnerability by processing malicious PDB files to cause crashes or write a single zero byte to freed memory. |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/168ffe18def968f886c023146a478897866fd621 | 2026-02-19 |
| CVE-2026-56374.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w54j-7wpm-crhj a heap buffer overflow vulnerability in the FTXT encoder due to missing boundary checks when parsing ftxt:format. (cherry picked from commit 22aef933133770706caafb93f814f5306dcca345) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/22aef933133770706caafb93f814f5306dcca345 | 2026-03-24 |
| CVE-2026-56375-pre1.patch | only update extend width/height in one thread [backport] - drop openmp command update only status for CVE-2026-56375 |
Cristy <urban-warrior@imagemagick.org> | no | https://github.com/ImageMagick/ImageMagick/commit/c86f7cb07dff5f36318e7a73e187987c5b6ac1dd | 2025-08-09 | |
| CVE-2026-56375.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6p22-q7w5-33pg (cherry picked from commit 3f55da39c813cc44ff21a61d6e0b85c375a2c1a2) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/3f55da39c813cc44ff21a61d6e0b85c375a2c1a2 | 2026-03-21 |
| CVE-2026-61464.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-76q6-2p6h-xjqr a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window title, |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/378bfc12bf7bbc4d9ab081120873efef935ebd85 | 2026-06-19 |
| CVE-2026-61465_1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rvhp-75f6-9jqh missing a check for the allowed memory allocation limit in matrix-backed operations such as -canny (cherry picked from commit dd0dedbecff931e93c4e72a57f7108bb13f76cf7) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/dd0dedbecff931e93c4e72a57f7108bb13f76cf7 | 2026-06-13 |
| CVE-2026-61465_2.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rvhp-75f6-9jqh (cherry picked from commit 0bcf10763277cdf0f61cf85e786575ae8665f13b) missing a check for the allowed memory allocation limit in matrix-backed operations such as -canny |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/0bcf10763277cdf0f61cf85e786575ae8665f13b | 2026-06-15 |
| CVE-2026-61857.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qh5g-q395-cx4j (cherry picked from commit 150c9852402ac1aa1f223e5bf5109e3a2022ebbc) a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/150c9852402ac1aa1f223e5bf5109e3a2022ebbc | 2026-06-13 |
| CVE-2026-61858.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v3j6-27vc-7pw2 A policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/19c11cb0aefbd627c95c4c08c44722e660025aa1 | 2026-06-14 |
| CVE-2026-61859.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vghg-5jrg-2398 a policy bypass vulnerability in the -script operation due to missing security policy checks |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/e047ee2c7b937c1db92302fe3701e2e9c169de27 | 2026-06-14 |
| CVE-2026-61860.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6jwg-7q3p-5fqm a use-after-free vulnerability that occurs when freetype initialization fails: the method does not exit and continues to use memory that was already freed |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/3fc646a498eecda9163164046189f90dc677ae64 | 2026-06-10 |
| CVE-2026-61861.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvxh-prvr-85w2 a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. (cherry picked from commit f89d59c5370cc48b758148cbdbea84c50511fee8) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/f89d59c5370cc48b758148cbdbea84c50511fee8 | 2026-06-10 |
| CVE-2026-61862.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hwf3-r46v-5ggx | Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/4079949bae0cde7e683df2e63c40f2e36f52c1b6 | 2026-06-05 |
| CVE-2026-61863.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6vxp-gfwf-hcr9 A memory leak in the TIFF encoder that occurs when a temporary file cannot be created, resulting in a small memory leak. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/f3ff3afee942a19e3041568bfa740d48213a3dec | 2026-06-04 |
| CVE-2026-61864.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7c7m-fpjw-gwcq (cherry picked from commit 174275bc1b53e2f23bbff7cd013dc9faa8a99c5a) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/174275bc1b53e2f23bbff7cd013dc9faa8a99c5a | 2026-06-04 |
| CVE-2026-61865.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j8rh-v2r8-v94x (cherry picked from commit b535126ba5abf23f2693e62ed79f10277d938cf4) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/b535126ba5abf23f2693e62ed79f10277d938cf4 | 2026-06-04 |
| CVE-2026-61866.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-99w9-hv66-rfv7 (cherry picked from commit 0bb3578ee087f3c4f14bbf1d8883ae456fc99092) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/0bb3578ee087f3c4f14bbf1d8883ae456fc99092 | 2026-06-05 |
| CVE-2026-61867.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jfq9-q63x-rc63 (cherry picked from commit f34065ecd9512df16cb10083c8b4b46b5cd09b30) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/f34065ecd9512df16cb10083c8b4b46b5cd09b30 | 2026-06-05 |
| CVE-2026-61868.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h7f2-f9cc-h2gv | Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/808506dc4d0cbf3972ce0d57544a06209b65009c | 2026-06-05 |
| CVE-2026-61869.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r628-69v2-2f9c | Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/b2dc602e175ee07b0794f3e31f1a29ae6b7267d1 | 2026-06-05 |
| CVE-2026-61870.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m596-67p7-69wh | Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/fdbf39ba9a681e53e6025d40501ae5a2bfec3000 | 2026-06-05 |
| CVE-2026-61871.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h58x-r7f7-rh84 | Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/b237a4fa9cbffcb11ee579d386fd37c570d5dffe | 2026-06-05 |
| CVE-2026-61872.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h5r4-w88w-7ccr | Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/ed143b98d72bba764b010eb822464f2a12b24ff1 | 2026-06-05 |
| CVE-2026-62343.patch | Added extra checks when acquiring the values of a kernel (GHSA-f5m7-cqgw-8hm7) (cherry picked from commit 9acf93f66b0f8495fa222e1a27c3db534cd78864) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/9acf93f66b0f8495fa222e1a27c3db534cd78864 | 2026-06-21 |
| CVE-2026-86420.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4mwf-mggw-29vp (cherry picked from commit 6ac07556a93b2de00c845cd535ca256f45a47154) Imagemagick fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated triggering of such failures can exhaust the process memory budget and result in a denial of service. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/6ac07556a93b2de00c845cd535ca256f45a47154 | 2026-08-21 |
| CVE-2026-86421.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4jv7-q6xw-6f4x A memory leak in the MSL image decoder. A crafted MSL image triggers memory allocation without proper deallocation, allowing an attacker to exhaust memory and cause a denial of service. (cherry picked from commit c83153dfc128de8e7c538f879c532c7d36a75abb) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/c83153dfc128de8e7c538f879c532c7d36a75abb | 2026-08-21 |
| CVE-2026-86423.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5m9j-96ff-j6qc Fix a heap-use-after-free vulnerability in the GetList method of PerlMagick. A crafted call to the GetList method can trigger the use-after-free, resulting in a crash (denial of service). |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/1d3e98913f6a8fa34b5a4180eadb9ed195b918a8 | 2026-08-15 |
| CVE-2026-86424_pre1.patch | export IsRightsAuthorizedByName() (cherry picked from commit 6c64b58815de0b18608214981bd94d1db16f0ec8) |
Cristy <urban-warrior@imagemagick.org> | no | https://github.com/ImageMagick/ImageMagick/commit/6c64b58815de0b18608214981bd94d1db16f0ec8 | 2026-06-14 | |
| CVE-2026-86424_pre2.patch | address remote TOCTOU issues [backport] - drop unrelated compare change (format change) (cherry picked from commit 99d821db45ed03afc80925ce11eff62abe80484a) |
Cristy <urban-warrior@imagemagick.org> | no | backport, https://github.com/ImageMagick/ImageMagick/commit/99d821db45ed03afc80925ce11eff62abe80484a | 2026-07-05 | |
| CVE-2026-86424_pre3.patch | ensure file resource identify is valid | Cristy <urban-warrior@imagemagick.org> | no | backport, https://github.com/ImageMagick/ImageMagick/commit/bbbf79e33935be36890707a49103b0e66698b82 | 2026-07-08 | |
| CVE-2026-86424_pre4.patch | include file mode when validating file identity [backport] - drop nt-base change not compiled on debian |
Cristy <urban-warrior@imagemagick.org> | no | backport, https://github.com/ImageMagick/ImageMagick/commit/c081559f9bf32c2613c2b46e2f469593a12dab26 | 2026-07-11 | |
| CVE-2026-86424_pre5.patch | No longer inline the method to reduce the local stack size. (cherry picked from commit d53e028a3d4e01705c36d2ebaf14e095488ebaa6) |
Dirk Lemstra <dirk@lemstra.org> | no | https://github.com/ImageMagick/ImageMagick/commit/d53e028a3d4e01705c36d2ebaf14e095488ebaa6 | 2026-07-16 | |
| CVE-2026-86424_pre6.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jxqv-9g3j-9jh6 (cherry picked from commit 166fdea9c39b5b21415e326f579947f80f1afbe7) [debian] - prepare CVE-2026-86424 patch by raising exception if needed |
Cristy <urban-warrior@imagemagick.org> | no | https://github.com/ImageMagick/ImageMagick/commit/166fdea9c39b5b21415e326f579947f80f1afbe7 | 2026-06-14 | |
| CVE-2026-86424.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9x6f-98x9-rx6g (cherry picked from commit a44ef50cc494253f7d9f0229bb25c064a8e2ae69) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/a44ef50cc494253f7d9f0229bb25c064a8e2ae69 | 2026-08-14 |
| CVE-2026-86425.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-chf5-8rv9-gjqr (cherry picked from commit 5bff96a5c8d0b3dafa4ad4fa7916db4cae72a11d) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/5bff96a5c8d0b3dafa4ad4fa7916db4cae72a11d | 2026-08-04 |
| CVE-2026-93586_1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3rjr-534c-8v67 (cherry picked from commit 282f455de5c80a7a0d1a713087db9c8fce344141) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/282f455de5c80a7a0d1a713087db9c8fce344141 | 2026-08-29 |
| CVE-2026-93586_2.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3rjr-534c-8v67 (cherry picked from commit 4fe31106f41fa114945ceaf93226fb151ada0d19) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/4fe31106f41fa114945ceaf93226fb151ada0d19 | 2026-08-29 |
| CVE-2026-93587_1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-89wq-f8f6-2j2v (cherry picked from commit d779ac52f92c3045ced59362b483bee25a3fc784) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/d779ac52f92c3045ced59362b483bee25a3fc784 | 2026-08-28 |
| CVE-2026-93587_2.patch | More fixes for GHSA-89wq-f8f6-2j2v (cherry picked from commit b5da5eac006bae77c587a7c238e346c90ea52acd) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/b5da5eac006bae77c587a7c238e346c90ea52acd | 2026-09-01 |
| CVE-2026-93588.patch | Added missing null check to avoid a null pointer dereference (GHSA-92rw-c5mw-27v4) (cherry picked from commit c4b3c9039a1509e3e7869331773865b521a62f93) [bookworm] - imagemagick <postponed> (Minor issue) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/c4b3c9039a1509e3e7869331773865b521a62f93 | 2026-08-29 |
| CVE-2026-93589.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4gg2-hfgh-6f5c (cherry picked from commit 8f620237fe341e814430fe3621b867b0b615f446) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/8f620237fe341e814430fe3621b867b0b615f446 | 2026-08-24 |
| CVE-2026-93590.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7hjx-392p-f8cm (cherry picked from commit 59046410c17e9421f0ad7b4bec478a892cf30c12) bug; https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7hjx-392p-f8cm |
Cristy <urban-warrior@imagemagick.org> | no | https://github.com/ImageMagick/ImageMagick/commit/59046410c17e9421f0ad7b4bec478a892cf30c12 | 2026-08-24 | |
| CVE-2026-102635_1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rvv7-5mh8-vcfc (cherry picked from commit a0ca2c739c0216ff4efbd631d1ba7fd54dba1ff4) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/a0ca2c739c0216ff4efbd631d1ba7fd54dba1ff4 | 2026-09-18 |
| CVE-2026-116155.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5jf2-9gcp-q234 (cherry picked from commit d8d635ecc52aec6553d96dcf5ca34cab81293a17) a memory leak in the handling of XMP profiles by various decoders. Attackers can supply images with a crafted XMP profile that leak memory each time they are processed, leading to resource exhaustion and denial of service. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/d8d635ecc52aec6553d96dcf5ca34cab81293a17 | 2026-09-28 |
| CVE-2026-102635_2.patch | revert (cherry picked from commit 87d251de1664c5ba71064912fd4cc419a983d105) [debian] this a partial revert resulting is: # diff --git a/coders/gif.c b/coders/gif.c # index 7cc2af9403..ca0bf0ed2f 100644 # --- a/coders/gif.c # +++ b/coders/gif.c # @@ -1165,7 +1165,7 @@ static Image *ReadGIFImage(const ImageInfo *image_info,ExceptionInfo *exception) # else # (void) FormatLocaleString(name,sizeof(name),"gif:%.11s", # buffer); # - reserved_length=255; # + reserved_length=256; # info=(unsigned char *) AcquireQuantumMemory((size_t) # reserved_length,sizeof(*info)); # if (info == (unsigned char *) NULL) see https://github.com/ImageMagick/ImageMagick/issues/9043 |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/a0ca2c739c0216ff4efbd631d1ba7fd54dba1ff4 | 2026-09-18 |
| CVE-2026-102635_3.patch | https://github.com/ImageMagick/ImageMagick/issues/8969 (cherry picked from commit ba4723adf2f8a29bf9372ed2c837cf678d3c13f9) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/ba4723adf2f8a29bf9372ed2c837cf678d3c13f9 | 2026-09-19 |
| CVE-2026-116145_2.patch | cosmetic (cherry picked from commit b270ee43814665152282723ceea9b6b9e9eae1e0) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/b270ee43814665152282723ceea9b6b9e9eae1e0 | 2026-10-03 | |
| CVE-2026-116145_3.patch | fix undefined variable (cherry picked from commit f1fb5d1c6b74f3e51ec6c93978ab292355b15d98) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/f1fb5d1c6b74f3e51ec6c93978ab292355b15d98 | 2026-10-03 | |
| CVE-2026-109261.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w68r-6fmr-cvg4 (cherry picked from commit 1c7763266cfedc635005a965169bc2ddcc650221) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/1c7763266cfedc635005a965169bc2ddcc650221 | 2026-09-22 |
| CVE-2026-107208_1.patch | Removed unused code. (cherry picked from commit 35318d3493de2db106506ae08c8d41c2aa544c49) [backport] Remove private code and first patch in serie to fix xml parsing |
Dirk Lemstra <dirk@lemstra.org> | no | 2026-08-21 | ||
| CVE-2026-107208_2.patch | Don't throw a fatal exception when hitting a recursion depth (GHSA-27m9-54jx-fgvq). (cherry picked from commit 907b74817836b4f88e7453f0e95c849a1c5311aa) |
Dirk Lemstra <dirk@lemstra.org> | no | 2026-08-21 | ||
| CVE-2026-106564.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-54rx-5x9g-g465 a crafted EXR image can cause the EXR decoder to write beyond a heap buffer, causing the process to crash. (cherry picked from commit f7437ebafcd92d6959eca4086d80b150d52bdb7c) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/f7437ebafcd92d6959eca4086d80b150d52bdb7c | 2026-09-22 |
| CVE-2026-105081_pre1.patch | directly iterate over the policy linked-list (cherry picked from commit 4bedfd7156f532d842157e8d398a9791b6024fa1) |
Cristy <urban-warrior@imagemagick.org> | no | backport, https://github.com/ImageMagick/ImageMagick/commit/4bedfd7156f532d842157e8d398a9791b6024fa1 | 2026-05-23 | |
| CVE-2026-106565.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m9c7-gf3j-hx6h A missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop and exhaust processing resources. (cherry picked from commit e9872c4a165d869e75d10799c47195725ebf4132) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/e9872c4a165d869e75d10799c47195725ebf4132 | 2026-09-18 |
| CVE-2026-106566.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-54hm-vrmh-75qj Delegate symlink cleanup does not check the MAGICK_SHRED_PASSES environment variable, allowing a local privileged workflow to overwrite a file with random data (cherry picked from commit 48e5ce1779fc640a389f0020fd7d965d0c08236e) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/48e5ce1779fc640a389f0020fd7d965d0c08236e | 2026-09-17 |
| CVE-2026-105081_pre2.patch | https://github.com/ImageMagick/ImageMagick/issues/8972 (cherry picked from commit 8dff70c173f3010e88fa2163b710de0799fdb79e) |
Cristy <urban-warrior@imagemagick.org> | no | backport, https://github.com/ImageMagick/ImageMagick/commit/8dff70c173f3010e88fa2163b710de0799fdb79e | 2026-09-24 | |
| CVE-2026-105081_pre3.patch | https://github.com/ImageMagick/ImageMagick/issues/8579 (cherry picked from commit d81304839898726d7bc5d77c4908bf7522ba2ab8) [backport] - remove unrelated to policy changes |
Cristy <urban-warrior@imagemagick.org> | no | backport, https://github.com/ImageMagick/ImageMagick/commit/d81304839898726d7bc5d77c4908bf7522ba2ab8 | 2026-09-25 | |
| CVE-2026-106567.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g6p6-3ggg-3w7j a crafted PSD file can trigger an integer-conversion error in the PSD decoder on 32-bit builds, causing an infinite loop and denial of service. (cherry picked from commit f053f778409932d55b95758c4b1516b63191d1eb) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/f053f778409932d55b95758c4b1516b63191d1eb | 2026-09-15 |
| CVE-2026-106568.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9p7q-63hw-mcr4 a crafted XMP profile embedded in an image can cause the profile parser to enter an infinite loop, preventing image processing from completing (cherry picked from commit e4f7ad983df6c831832eba3689f96b75f8b67051) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/e4f7ad983df6c831832eba3689f96b75f8b67051 | 2026-09-12 |
| port-distribute-cache-7.1.2.33.patch | Port distribute-cache to 7.1.2.33 | Bastien Roucariès <rouca@debian.org> | no | 2026-10-18 | ||
| CVE-2026-106571-pre1.patch | move add check to private header (cherry picked from commit b3b8d209e1daee47600cac62510c4b1e6d7380ba) [backport] - use SIZE_MAX instead of alias MAGICK_SIZE_MAX defined in image-private.h in order to avoid header breakage |
Cristy <urban-warrior@imagemagick.org> | no | https://github.com/ImageMagick/ImageMagick/commit/b3b8d209e1daee47600cac62510c4b1e6d7380ba | 2026-06-30 | |
| CVE-2026-106571.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jvjm-9f73-fhpq a crafted local call to the GetVirtualPixels API can trigger an integer calculation error and write beyond a heap buffer, crashing the server process (cherry picked from commit 8f3a15e60b723bfe3e80bd1b5e4bee88397467f7) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/8f3a15e60b723bfe3e80bd1b5e4bee88397467f7 | 2026-09-02 |
| CVE-2026-106572.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wxw6-98rj-hjfr a missing recursion-depth check in the CALS decoder allows a crafted CALS image to exhaust the call stack and terminate the process (cherry picked from commit 19bce64e3667ff0348d559e2526c850f8fbe2b5a) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/19bce64e3667ff0348d559e2526c850f8fbe2b5a | 2026-08-03 |
| CVE-2026-106573.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qr53-hc3p-fc62 a missing limit check in the MVG decoder allows a crafted MVG image to trigger an excessively long-running operation (cherry picked from commit c311471c4e4978494834c707b417bc033d95cc48) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/c311471c4e4978494834c707b417bc033d95cc48 | 2026-08-27 |
| CVE-2026-105081_1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-79p5-w6jv-r997 (cherry picked from commit 5b3c9dd5fcfea139651be3bc5e89ce1dca709273) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/5b3c9dd5fcfea139651be3bc5e89ce1dca709273 | 2026-10-03 | |
| CVE-2026-106574.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4fq9-vrx7-gv92 (cherry picked from commit c69f54e1c8660e45f2ff83c354bf924a946d9356) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/c69f54e1c8660e45f2ff83c354bf924a946d9356 | 2026-08-27 |
| CVE-2026-105081_2.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-79p5-w6jv-r997 (cherry picked from commit c73f7913f72b8d97fe89f4094eefdc8d34edf5a9) |
Cristy <urban-warrior@imagemagick.org> | no | backport, https://github.com/ImageMagick/ImageMagick/commit/c73f7913f72b8d97fe89f4094eefdc8d34edf5a9 | 2026-10-03 | |
| policy-7.1.2-34_2.patch | Moved SubstituteXMLEntities so we don't duplicate the method. (cherry picked from commit 223fccf8f8eb542a8bd844ffeb056b3a3840c2c8) |
Dirk Lemstra <dirk@lemstra.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/223fccf8f8eb542a8bd844ffeb056b3a3840c2c8 | 2026-10-04 | |
| CVE-2026-106575.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2w4h-697j-4vrm a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors. (cherry picked from commit 86672a16cedbf5a06d64e629e058310d683bb48e) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/86672a16cedbf5a06d64e629e058310d683bb48e | 2026-08-27 |
| CVE-2026-106576.patch | Use a better algorithm to determine the numerator and denominator (GHSA-v45j-x8p4-3mh4) (cherry picked from commit f491576297141ff685dc4460d811986f5b6b6cec) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/f491576297141ff685dc4460d811986f5b6b6cec | 2026-08-28 |
| CVE-2026-106577_pre1.patch | Moved EscapeParenthesis to the ghostscript-private.h header file. (cherry picked from commit e2bd884c19c50b21458833a9e7a2f8528a683d25) |
Dirk Lemstra <dirk@lemstra.org> | no | https://github.com/ImageMagick/ImageMagick/commit/e2bd884c19c50b21458833a9e7a2f8528a683d25 | 2026-08-27 | |
| CVE-2026-106577_1.patch | More fixes for GHSA-5rg6-j44q-q892. (cherry picked from commit 2ba2edfd04a1ab3d45af4a0dc1e640dde7020192) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/2ba2edfd04a1ab3d45af4a0dc1e640dde7020192 | 2026-09-01 |
| CVE-2026-106577_2.patch | Escape the labels to prevent code injection (GHSA-5rg6-j44q-q892) (cherry picked from commit 78378cd623468760bee82a5930cb3011725916f8) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/78378cd623468760bee82a5930cb3011725916f8 | 2026-08-27 |
| CVE-2026-106578.patch | Corrected the call to CheckPrimitiveExtent to fix the use of uninitialized heap memory (GHSA-6xf5-c3jx-rp39) (cherry picked from commit 5d29c094020612dc8fb471b10fc1d1cc6e9e4378) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/5d29c094020612dc8fb471b10fc1d1cc6e9e4378 | 2026-08-27 |
| CVE-2026-25971-post1.patch | https://github.com/ImageMagick/ImageMagick/issues/8803 Fix regression in svg base64 | Cristy <urban-warrior@imagemagick.org> | no | debian | https://github.com/ImageMagick/ImageMagick/commit/c0a724bbbd2c131ca6e2b79e67cd245e5150a19a | 2026-06-17 |
| CVE-2026-106579-pre1.patch | Disabling a module will now also disable all the coders in that module. (cherry picked from commit 061b7b28d807d9295ddf2bf12b2eaa63f53a015c) |
Dirk Lemstra <dirk@lemstra.org> | no | https://github.com/ImageMagick/ImageMagick/commit/061b7b28d807d9295ddf2bf12b2eaa63f53a015c | 2025-11-28 | |
| CVE-2026-106579_1.patch | Fixed the policy check for coders (GHSA-vcjj-32hg-qpx5) (cherry picked from commit 82f373fedb3425c83a239103ab86f4fa86fd49ac) |
Dirk Lemstra <dirk@lemstra.org> | no | https://github.com/ImageMagick/ImageMagick/commit/82f373fedb3425c83a239103ab86f4fa86fd49ac | 2026-08-27 | |
| CVE-2026-106579_2.patch | More fixes for GHSA-vcjj-32hg-qpx5. (cherry picked from commit dcdbbf4278fab20a32a4ad80e64cb95c368ca8dd) |
Dirk Lemstra <dirk@lemstra.org> | no | https://github.com/ImageMagick/ImageMagick/commit/dcdbbf4278fab20a32a4ad80e64cb95c368ca8dd | 2026-08-27 | |
| CVE-2026-106580_1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-75mw-9cc9-fqx9 (cherry picked from commit 95348072e253fd101050b493ae70ba0ec253aefc) |
Cristy <urban-warrior@imagemagick.org> | no | https://github.com/ImageMagick/ImageMagick/commit/95348072e253fd101050b493ae70ba0ec253aefc | 2026-06-19 | |
| CVE-2026-106580_2.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r868-pmwh-fv2c (cherry picked from commit 768bdd0dbb9a9ad743b6a6e557126b788b325970) |
Cristy <urban-warrior@imagemagick.org> | no | https://github.com/ImageMagick/ImageMagick/commit/768bdd0dbb9a9ad743b6a6e557126b788b325970 | 2026-08-24 | |
| CVE-2026-107209.patch | Fixed double free in non cairo builds (https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f2r2-qw7g-3c8x) (cherry picked from commit 326451aae51ac2dabc99fe66e063de6ec14cf8c8) |
Dirk Lemstra <dirk@lemstra.org> | no | https://github.com/ImageMagick/ImageMagick/commit/326451aae51ac2dabc99fe66e063de6ec14cf8c8 | 2026-08-21 | |
| CVE-2026-107210-pre1.patch | check for insufficient image data (cherry picked from commit 62c229bb8ffbb0a8e42c3654298494b4b16b39a2) |
Cristy <urban-warrior@imagemagick.org> | no | https://github.com/ImageMagick/ImageMagick/commit/62c229bb8ffbb0a8e42c3654298494b4b16b39a2 | 2026-07-05 | |
| CVE-2026-107210.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3j4w-pvxj-fpjc (cherry picked from commit ae2ed8c81d8fad1f186e7f2bc0837b46a1c7be61) |
Cristy <urban-warrior@imagemagick.org> | no | backport, https://github.com/ImageMagick/ImageMagick/commit/ae2ed8c81d8fad1f186e7f2bc0837b46a1c7be61 | 2026-08-17 | |
| GHSA-83w9-w85j-h9jc.patch | Added missing cleanup in error path of the MAT decoder (GHSA-83w9-w85j-h9jc) (cherry picked from commit 62c7876c37347dee0be1872e623650ba59f8a541) |
Dirk Lemstra <dirk@lemstra.org> | no | https://github.com/ImageMagick/ImageMagick/commit/62c7876c37347dee0be1872e623650ba59f8a541 | 2026-09-29 | |
| GHSA-83w9-w85j-h9jc-1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-83w9-w85j-h9jc (cherry picked from commit af510e976301c2516aaa26ea8f88318450eeece2) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/af510e976301c2516aaa26ea8f88318450eeece2 | 2026-09-29 |
| coders-mat-c-7.1.2.33.patch | Port coders/mat.c to 7.1.2.33 | Bastien Roucariès <rouca@debian.org> | no | 2026-10-23 | ||
| policy-7.1.2-34_3.patch | Improved skipping of comments and return a failure when comments or doctype are not terminated. (cherry picked from commit 504231bb26021ba66d9633f34ba15ded32637b5e) |
Dirk Lemstra <dirk@lemstra.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/504231bb26021ba66d9633f34ba15ded32637b5e | 2026-10-05 | |
| policy-7.1.2-34_4.patch | Fix memory leak when policy parsing stops before append (cherry picked from commit ba65fcd80f8296b96641b7f47c45d1ee989527ec) |
Dirk Lemstra <dirk@lemstra.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/ba65fcd80f8296b96641b7f47c45d1ee989527ec | 2026-10-05 | |
| policy-7.1.2-34_5.patch | Stop configuration parsing when an included file fails. (cherry picked from commit a3b8df6ab0ca77c1bd9da26ec2514b6a8175c51f) |
Dirk Lemstra <dirk@lemstra.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/a3b8df6ab0ca77c1bd9da26ec2514b6a8175c51f | 2026-10-05 | |
| CVE-2026-109258.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pv8x-gq6w-gp4r (cherry picked from commit 8caa6a0c62a3ac1f81b19a2ee929fbfe46ee0323) an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/8caa6a0c62a3ac1f81b19a2ee929fbfe46ee0323 | 2026-09-22 |
| policy-7.1.2-34_6.patch | Deny authorization when policy configuration fails to load. (cherry picked from commit aaf5e8d9ae5177c705c55a798d80700addec3255) |
Dirk Lemstra <dirk@lemstra.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/aaf5e8d9ae5177c705c55a798d80700addec3255 | 2026-10-05 | |
| CVE-2026-86422.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-x8g2-7r3w-h44p (cherry picked from commit fb0b4ffc4b798b9b36744b978726b7d7ec39bd8d) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/fb0b4ffc4b798b9b36744b978726b7d7ec39bd8d | 2026-08-19 | |
| GHSA-pp97-v3gv-9vh4_1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pp97-v3gv-9vh4 (cherry picked from commit 1b0cd979f2177be0ef2d56b07fbcaf4a46667c24) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/1b0cd979f2177be0ef2d56b07fbcaf4a46667c24 | 2026-10-17 | |
| GHSA-pp97-v3gv-9vh4_2.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pp97-v3gv-9vh4 (cherry picked from commit a28f038cd7d8490f1f25cf84dac1389a92e89c76) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/a28f038cd7d8490f1f25cf84dac1389a92e89c76 | 2026-10-17 | |
| GHSA-pp97-v3gv-9vh4_post1.patch | track parse entities exceptions (cherry picked from commit 93c373327c616c377b53ae943b6f5ab1b985cb82) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/93c373327c616c377b53ae943b6f5ab1b985cb82 | 2026-10-17 | |
| GHSA-pp97-v3gv-9vh4_post2.patch | throw proper exception when profile exceeds maximum (cherry picked from commit 7e3e1d0b6a973106fd11f7139f8f04cb8cc74471) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/7e3e1d0b6a973106fd11f7139f8f04cb8cc74471 | 2026-10-17 | |
| CVE-2026-109259_1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h499-883p-vph8 (cherry picked from commit df199b79f0a1c87ca009e431f03cb387af160f77) An uninitialized memory read in the TGA image decoder that can expose memory contents. Attackers can supply a crafted TGA image for processing to disclose contents of uninitialized memory from the ImageMagick process. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/df199b79f0a1c87ca009e431f03cb387af160f77 | 2026-09-22 |
| CVE-2026-109259_2.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h499-883p-vph8 (cherry picked from commit 8e809498fd328256612ee9c0ff7941bd452a0285) An uninitialized memory read in the TGA image decoder that can expose memory contents. Attackers can supply a crafted TGA image for processing to disclose contents of uninitialized memory from the ImageMagick process. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/8e809498fd328256612ee9c0ff7941bd452a0285 | 2026-09-22 |
| CVE-2026-109259_3.patch | Fixed build error. (cherry picked from commit 367e4fa7dd9df4f2ac29a7fd92647d395a1e6ee9) An uninitialized memory read in the TGA image decoder that can expose memory contents. Attackers can supply a crafted TGA image for processing to disclose contents of uninitialized memory from the ImageMagick process. |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/367e4fa7dd9df4f2ac29a7fd92647d395a1e6ee9 | 2026-09-25 |
| CVE-2026-109259_4.patch | Switch to memset to make sure this works with all compilers. (cherry picked from commit 5f5fe85aa513d71c5cc92a81fa7c23397476cc5f) An uninitialized memory read in the TGA image decoder that can expose memory contents. Attackers can supply a crafted TGA image for processing to disclose contents of uninitialized memory from the ImageMagick process. |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/5f5fe85aa513d71c5cc92a81fa7c23397476cc5f | 2026-09-25 |
| CVE-2026-109260.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hvwf-wmm6-hvc3 (cherry picked from commit fd1b9c85f2634e34034d39016ed7542ac0a19930) a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause a denial of service. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/fd1b9c85f2634e34034d39016ed7542ac0a19930 | 2026-09-22 |
| CVE-2026-109264.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pmqj-84pr-qc7c Uncontrolled recursion in the MVG decoder that can exhaust the program stack. An attacker who controls a file name processed by ImageMagick can trigger a stack overflow that crashes the process, causing a denial of service. (cherry picked from commit 6ff963c14ccb5fefb4eb8654c8b0219033df2b20) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/6ff963c14ccb5fefb4eb8654c8b0219033df2b20 | 2026-09-22 |
| CVE-2026-109262.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w288-jj5x-hhvp (cherry picked from commit 2eff6be3785d980bb5190244ad432fe6282d29e3) a memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images. Attackers can supply crafted image files that are processed by the SVG encoder to leak memory and cause a denial of service through resource consumption. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/2eff6be3785d980bb5190244ad432fe6282d29e3 | 2026-09-22 |
| CVE-2026-109264_post1.patch | introducing StrictReadImage() private method (cherry picked from commit 4cdbcd46d9f87fcec256708d22add039eea685ba) |
Cristy <urban-warrior@imagemagick.org> | no | backport, https://github.com/ImageMagick/ImageMagick/commit/4cdbcd46d9f87fcec256708d22add039eea685ba | 2026-06-19 | |
| CVE-2026-109264_post2.patch | https://github.com/ImageMagick/ImageMagick/issues/8813 (cherry picked from commit 71bf0b0b59fbafea1a5ee3f33a6ae261d30e059f) |
Cristy <urban-warrior@imagemagick.org> | no | backport, https://github.com/ImageMagick/ImageMagick/commit/71bf0b0b59fbafea1a5ee3f33a6ae261d30e059f | 2026-06-21 | |
| CVE-2026-109264_post3.patch | eliminate compiler warning (cherry picked from commit dc92169133fd90abe0b1cb7d1e4263a78e43df9d) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/dc92169133fd90abe0b1cb7d1e4263a78e43df9d | 2026-06-21 | |
| CVE-2026-109264_post4.patch | https://github.com/ImageMagick/ImageMagick/issues/8815 (cherry picked from commit 5e1a1413504827f5154f2397a38618028f91262c) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/5e1a1413504827f5154f2397a38618028f91262c | 2026-06-22 | |
| CVE-2026-109264_post5.patch | https://github.com/ImageMagick/ImageMagick/issues/8815 (cherry picked from commit 9616e884b5b7a37318cd75cd1bbd24fea07830bd) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/9616e884b5b7a37318cd75cd1bbd24fea07830bd | 2026-06-22 | |
| CVE-2026-109264_post6.patch | correct allow coder logic (cherry picked from commit 634f3a971647a6f94b77afe667f9c76ebb3ff551) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/634f3a971647a6f94b77afe667f9c76ebb3ff551 | 2026-06-22 | |
| CVE-2026-109264_post7.patch | support coder strict streaming attribute (cherry picked from commit 727ddc924c1455c5a2bfc57758b619d2baa3fec4) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/727ddc924c1455c5a2bfc57758b619d2baa3fec4 | 2026-06-23 | |
| CVE-2026-109264_post8.patch | change coder flag name (cherry picked from commit 9f7e3cb14c4d2a61fd72f9d6696ddd0d18dde216) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/9f7e3cb14c4d2a61fd72f9d6696ddd0d18dde216 | 2026-06-23 | |
| CVE-2026-109264_post9.patch | check for vector recursion (cherry picked from commit 9bd0fea7958d6228b9d0fb450119b1462d14bb6b) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/9bd0fea7958d6228b9d0fb450119b1462d14bb6b | 2026-09-22 | |
| CVE-2026-109264_post10.patch | protect against deep glob recursion (cherry picked from commit e739a383df7c14bef90b32ae333b4c827ae92da8) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/e739a383df7c14bef90b32ae333b4c827ae92da8 | 2026-02-18 | |
| CVE-2026-109264_post11.patch | always check >= max recursion depth (cherry picked from commit 93b67e25e3db42aae3c9bacad80af29a61c7bee5) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/93b67e25e3db42aae3c9bacad80af29a61c7bee5 | 2026-09-23 | |
| CVE-2026-109264_post12.patch | check coder nesting (cherry picked from commit 02100e28feb25970ddb138a9f3a61f869d989258) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/02100e28feb25970ddb138a9f3a61f869d989258 | 2026-09-26 | |
| CVE-2026-109264_post13.patch | eleiminate compiler warning (cherry picked from commit 8e1b899053c339bac840ab2c8b634e84c1c193a0) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/8e1b899053c339bac840ab2c8b634e84c1c193a0 | 2026-09-26 | |
| CVE-2026-109264_post14.patch | eliminate compiler warning (cherry picked from commit 92300f82f12704337b06507019a1fa00353f69b0) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/92300f82f12704337b06507019a1fa00353f69b0 | 2026-09-26 | |
| CVE-2026-109264_post15.patch | revert (cherry picked from commit 9f41b2752975249fdba28c2e7898cb534915cab4) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/9f41b2752975249fdba28c2e7898cb534915cab4 | 2026-09-22 | |
| CVE-2026-109263.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-69jx-j2x2-g5w4 (cherry picked from commit 493fab0b6072787e929184761b6ab6405a9486a2) A memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. Attackers can supply crafted input that triggers the failing encoder operation, leaking memory and potentially exhausting resources to cause a denial of service. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/493fab0b6072787e929184761b6ab6405a9486a2 | 2026-09-22 |
| CVE-2026-109265.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jph3-37cg-79wg (cherry picked from commit 7605c7619da77a5ff1ccf4ec159f3ec782c6bda7) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/7605c7619da77a5ff1ccf4ec159f3ec782c6bda7 | 2026-09-19 |
| CVE-2026-109266.patch | Escape the title in the CIP encoder (GHSA-3429-f84m-8qhw) (cherry picked from commit 45bb7328b36c163234f5ccb7f1d494b7c4c8c775) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/45bb7328b36c163234f5ccb7f1d494b7c4c8c775 | 2026-09-18 |
| CVE-2026-109267.patch | Corrected depth check to prevent a stack overflow (GHSA-462x-739v-qvq2) (cherry picked from commit 507aee2308046b25e251d0be1a5371327bb79683) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/507aee2308046b25e251d0be1a5371327bb79683 | 2026-09-19 |
| GHSA-p6j5-2qwh-6486_1.patch | Removed unused code. (cherry picked from commit ad464d19e4d43949dd20fda0a6262cf130b3b969) |
Dirk Lemstra <dirk@lemstra.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/ad464d19e4d43949dd20fda0a6262cf130b3b969 | 2026-09-03 | |
| GHSA-p6j5-2qwh-6486_2.patch | Trim labels to prevent code injection (GHSA-p6j5-2qwh-6486) (cherry picked from commit 8309dc92a18722a9ccc4bb9c848ac2d01426cfe5) |
Dirk Lemstra <dirk@lemstra.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/8309dc92a18722a9ccc4bb9c848ac2d01426cfe5 | 2026-09-03 | |
| CVE-2026-109268.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j39j-wmxg-j8mv A use after free vulnerability in the PDF writer when writing CMYK images with JPEG2000 compression. Attackers can supply a crafted CMYK image that, when written to PDF with JPEG2000 compression, causes freed memory to be reused, potentially crashing the process. (cherry picked from commit 3285d692ebf200e9cbeff59d1ccc00caab99ad54) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/3285d692ebf200e9cbeff59d1ccc00caab99ad54 | 2026-09-18 |
| CVE-2026-109269.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xxrx-rjp3-27rj (cherry picked from commit aa104ff2e408bea23828e7a7a346f9080da4104b) an information disclosure vulnerability in the JPEG decoder, which performs a read that exposes uninitialized memory when handling crafted input. Attackers can supply a crafted JPEG file for processing to disclose uninitialized memory contents. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/aa104ff2e408bea23828e7a7a346f9080da4104b | 2026-09-18 |
| CVE-2026-109270.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f32c-2v6j-wvh5 (cherry picked from commit da4cfd78a2ceea4cf54207834f9d60c1b9c38797) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/da4cfd78a2ceea4cf54207834f9d60c1b9c38797 | 2026-09-16 |
| CVE-2026-109272.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-58h4-rwr6-wj72 (cherry picked from commit d98509b23a547d9ccd0a8af8650d03c5c01c3722) a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/d98509b23a547d9ccd0a8af8650d03c5c01c3722 | 2026-09-13 |
| CVE-2026-109273.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5j8x-vq8c-vrp9 (cherry picked from commit 5a5c2e51948fcc5d85b8d832938e2c1b4db4a699) An information disclosure vulnerability in the PostScript decoder, which allocates a buffer one byte longer than the data it decoded. Attackers can supply a crafted PostScript file to expose a single uninitialized byte of memory contents. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/5a5c2e51948fcc5d85b8d832938e2c1b4db4a699 | 2026-09-13 |
| CVE-2026-109277.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vv56-wmgw-m36w (cherry picked from commit ce92ae07c2ca2c20c131eaf6da6da734c1cafce0) a policy bypass vulnerability in the -script operation due to missing checks on file descriptor handling. Attackers can use the -script operation to close file descriptors not opened by the current operation, circumventing configured security policies. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/ce92ae07c2ca2c20c131eaf6da6da734c1cafce0 | 2026-09-08 |
| CVE-2026-109274.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7q74-r26w-fwcx (cherry picked from commit 9e789499e67dbf5c4ee9fe1b72690738c799ec73) a time-of-check time-of-use symlink race vulnerability that allows attackers to bypass the path security policy when executing a magick script. Attackers can swap a checked path with a symlink during script execution to read files that the security policy is meant to block. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/9e789499e67dbf5c4ee9fe1b72690738c799ec73 | 2026-09-12 |
| CVE-2026-109275.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-233r-2p53-wqf5 a code injection vulnerability in the MVG decoder when a PostScript renderer is used. Attackers can supply a crafted MVG file that, when decoded, injects code into the PostScript rendering path. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/6cfb8d8c65bb0aba49903589b444f45ea074a226 | 2026-09-12 |
| CVE-2026-109276_1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f983-243h-9x4r (cherry picked from commit b2d579d20cc503185b6e8b0bc2dfb520b7bce58a) [backport] - drop unrelated fix on perlmagick |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/b2d579d20cc503185b6e8b0bc2dfb520b7bce58a | 2026-09-12 |
| CVE-2026-109276_2.patch | eliminate compiler exception (cherry picked from commit ca20b6b4220f6d3e1ee5be0f363c88878cbbe81d) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/ca20b6b4220f6d3e1ee5be0f363c88878cbbe81d | 2026-09-12 |
| CVE-2026-109278.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9f9w-84g3-vp2c (cherry picked from commit 15892fc0dc050a3693e28a214478a8d8488d648c) a memory leak in the wavelet-denoise operation, which fails to release allocated memory when a required resource cannot be acquired. Attackers can repeatedly trigger wavelet-denoise processing under resource-constrained conditions to leak memory and degrade service availability. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/15892fc0dc050a3693e28a214478a8d8488d648c | 2026-09-05 |
| upstream-bug-8994.patch | https://github.com/ImageMagick/ImageMagick/issues/8994 (cherry picked from commit 91dd68053a6d54831fc66f15ebc83f9d2f5d1d15) Memory leak in PolaroidImage when the image has a caption |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/91dd68053a6d54831fc66f15ebc83f9d2f5d1d15 | 2026-10-02 |
| CVE-2026-109279.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8x3v-wr32-qqh4 (cherry picked from commit 12db6f04e895deae4537ead10c771a244607794a) lacks proper synchronization when the security policy is accessed, so simultaneous reads and writes of the policy by multiple threads trigger a race condition that causes a heap buffer over-write. An attacker able to induce concurrent security policy access can crash the application, causing a denial of service. [backport] - add a missing ; |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/12db6f04e895deae4537ead10c771a244607794a | 2026-09-05 |
| CVE-2026-109281.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cvgp-q487-j22w (cherry picked from commit 0e82a4d0b294581186ed7b3e1dce59c858a73dba) a heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds of an allocated heap buffer in specific situations. Attackers who can get a crafted -fx expression processed can read out-of-bounds heap memory, potentially disclosing limited memory contents. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | https://github.com/ImageMagick/ImageMagick/commit/0e82a4d0b294581186ed7b3e1dce59c858a73dba | 2026-09-05 |
| CVE-2026-109280_1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v2x3-wpmg-c4w6 (cherry picked from commit fb743d60700c9bc350c3d2a0b48b998bdabc466c) a use after free vulnerability in the -fx option that occurs when a memory allocation fails during a specific operation. Attackers who can supply crafted -fx expressions under memory pressure can trigger freed memory access, causing crashes or memory corruption. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/fb743d60700c9bc350c3d2a0b48b998bdabc466c | 2026-09-05 |
| CVE-2026-109280_2.patch | eliminate compiler warning (cherry picked from commit ce948a1745397593343b1a218ae113ceb8ee1327) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/ce948a1745397593343b1a218ae113ceb8ee1327 | 2026-09-05 | |
| CVE-2026-109280_3.patch | eliminate compiler warning (cherry picked from commit 5921a78a0f6d9a40119c71339c9c07c27f8f94d5) |
Cristy <urban-warrior@imagemagick.org> | no | https://github.com/ImageMagick/ImageMagick/commit/5921a78a0f6d9a40119c71339c9c07c27f8f94d5 | 2026-09-05 | |
| CVE-2026-109282.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8xmr-6q99-c4x8 (cherry picked from commit af7b85012e62fa65393277790b96c56a98d882b6) a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an unexpected type when writing an image in a compressed format. An attacker who can cause such an image write can trigger a SIGABRT or SIGSEGV, crashing the process and causing denial of service. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/af7b85012e62fa65393277790b96c56a98d882b6 | 2026-09-05 |
| CVE-2026-109964.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mqmp-r5jh-jx7w (cherry picked from commit 63dde0cf281383ab69432b88305f7dcd6a8ce900) heap buffer underwrite vulnerability in DecodeImage() in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and write up to 128 controlled bytes below the heap buffer, causing crashes or code execution. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/63dde0cf281383ab69432b88305f7dcd6a8ce900 | 2026-09-29 |
| CVE-2026-116140_pre1.patch | Report errors or return null instead of exiting the process. (cherry picked from commit a6b9e7f72e00fddb59a3ca8934e78cf8e9bcf59c) |
Dirk Lemstra <dirk@lemstra.org> | no | backport, https://github.com/ImageMagick/ImageMagick/commit/a6b9e7f72e00fddb59a3ca8934e78cf8e9bcf59c | 2026-08-21 | |
| CVE-2026-116140_pre2.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vxwm-jfjc-3r4x (cherry picked from commit 48c49d0cc2b72970b762e0d3263f6c35ab35a7b4) [debian] We merge unrelated change to MagickCore/string that belong to GHSA-528x-2384-jmxp |
Cristy <urban-warrior@imagemagick.org> | no | backport, https://github.com/ImageMagick/ImageMagick/commit/48c49d0cc2b72970b762e0d3263f6c35ab35a7b4 | 2026-09-13 | |
| CVE-2026-116140_1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-528x-2384-jmxp (cherry picked from commit 453568d7d98a409681374ffacaf2edf2cd53c1f3) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/453568d7d98a409681374ffacaf2edf2cd53c1f3 | 2026-10-08 | |
| CVE-2026-116140_2.patch | don't skip shell characters (cherry picked from commit 37a213e2dc13ff305e349a6c9e36e590428c5ea1) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/37a213e2dc13ff305e349a6c9e36e590428c5ea1 | 2026-10-08 | |
| CVE-2026-116140_3.patch | account for backticks (cherry picked from commit 5aa7761ce567c4ad377f9625376221e4efdc66c6) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/5aa7761ce567c4ad377f9625376221e4efdc66c6 | 2026-10-09 | |
| CVE-2026-116140_4.patch | account for shell escape (cherry picked from commit a003c02abc42ac449dd4c8e5df6e91eb1218deec) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/a003c02abc42ac449dd4c8e5df6e91eb1218deec | 2026-10-09 | |
| CVE-2026-116141.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h3qx-937j-245g (cherry picked from commit d1402c213c06d06f2e006e9ff433050774093677) |
Cristy <urban-warrior@imagemagick.org> | no | backport, https://github.com/ImageMagick/ImageMagick/commit/d1402c213c06d06f2e006e9ff433050774093677 | 2026-10-06 | |
| GHSA-q6h4-6f2h-8hfq.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q6h4-6f2h-8hfq (cherry picked from commit 2ec49e6f1971ee5b0ff654364cf806b20c202c86) |
Cristy <urban-warrior@imagemagick.org> | no | https://github.com/ImageMagick/ImageMagick/commit/2ec49e6f1971ee5b0ff654364cf806b20c202c86 | 2026-09-09 | |
| CVE-2026-116153.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7438-vh5v-v52h (cherry picked from commit 3882fd7116e0794a05457f78da80cd39f83b52c3) a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is requested. Attackers can supply crafted images processed with convex-hull calculations to corrupt heap memory, causing crashes or potential code execution |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/3882fd7116e0794a05457f78da80cd39f83b52c3 | 2026-09-28 |
| CVE-2026-116142_1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5222-mhv9-26rg (cherry picked from commit 5690b36dae2b6277054ca163542fb69ed570e3d9) a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory when printing a minimum-bounding-box. Attackers can supply a crafted image that triggers the over-read during minimum-bounding-box output, causing crashes or exposing adjacent heap memory. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/5690b36dae2b6277054ca163542fb69ed570e3d9 | 2026-10-05 |
| CVE-2026-116142_2.patch | eliminate compiler warning (cherry picked from commit f5f1a8233864b02e7db11cdb28a3eb2adc70250f) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/f5f1a8233864b02e7db11cdb28a3eb2adc70250f | 2026-10-05 | |
| CVE-2026-116143_1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-fp46-842c-2v83 (cherry picked from commit 3d96f305edff25c2ce6792c72d5f6987c8a5a961) a policy bypass in the PS, PDF and XPS decoders that allows the security policy's list length limit on scene selection to be circumvented. Attackers supplying a specific argument can cause ImageMagick to process more scenes than permitted, potentially exhausting resources. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/3d96f305edff25c2ce6792c72d5f6987c8a5a961 | 2026-10-05 |
| CVE-2026-116143_2.patch | coders/xps: add missing list-length resource guard in ReadXPSImage (#9006) (cherry picked from commit e3812ff1c97ba2adf0bb907a4598a272e606a49a) |
Kalt2212 <107548841+kalt2212@users.noreply.github.com> | no | https://github.com/ImageMagick/ImageMagick/commit/e3812ff1c97ba2adf0bb907a4598a272e606a49a | 2026-10-07 | |
| CVE-2026-116144.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-x258-xjqf-6j3f (cherry picked from commit 8911876f1e1e8f69cf1c1dd8f9a69685c8b776ae) uncontrolled recursion in the MVG decoder that can lead to a stack overflow. Attackers can supply a crafted MVG file that, when read with specific arguments, exhausts the stack and crashes the process, causing a denial of service. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/8911876f1e1e8f69cf1c1dd8f9a69685c8b776ae | 2026-10-04 |
| CVE-2026-116146.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j657-rmv3-4m94 (cherry picked from commit 64645a7e72cf597de471dce016f3496c1e29c17a) a memory leak in the MSL decoder that fails to release allocated memory when processing a crafted MSL image. Attackers can supply crafted MSL files for processing to repeatedly leak memory, causing resource exhaustion and denial of service. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/64645a7e72cf597de471dce016f3496c1e29c17a | 2026-09-30 |
| CVE-2026-116147.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v5f5-4v9x-p3f2 (cherry picked from commit d4069fe50be320cf7ab25261e516b176f36fc02f) a null pointer dereference in the DJVU decoder because the result of a memory allocation is not checked before use. Attackers can supply a DJVU image that, when processed under conditions where the allocation fails, crashes the process and causes a denial of service. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/d4069fe50be320cf7ab25261e516b176f36fc02f | 2026-09-30 |
| CVE-2026-116148_1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qq8x-fq3x-43h4 (cherry picked from commit 59071d53ae13542174f99f81e59cca076bd5d70e) an injection vulnerability in the MVG encoder, which does not properly neutralize user-specified drawing options before writing them into generated MVG output. Attackers who can supply drawing options can inject arbitrary MVG drawing commands into the resulting MVG file. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/59071d53ae13542174f99f81e59cca076bd5d70e | 2026-09-30 |
| CVE-2026-116148_2.patch | eliminate compiler warning (cherry picked from commit 90bf73ede2b0c3120965155d8f852adb711b1e58) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/90bf73ede2b0c3120965155d8f852adb711b1e58 | 2026-09-30 | |
| GHSA-2wwj-grp2-3fp5.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2wwj-grp2-3fp5 (cherry picked from commit 8aeb8e603c2960e2aaf6228924288c8bff49e765) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/8aeb8e603c2960e2aaf6228924288c8bff49e765 | 2026-10-02 | |
| CVE-2026-116149_1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pwpf-8799-94cj (cherry picked from commit cf40ce974c3f780b7f6913bcff7bec27087c9104) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/cf40ce974c3f780b7f6913bcff7bec27087c9104 | 2026-09-29 |
| CVE-2026-116149_2.patch | Added missing check for the return value. (cherry picked from commit 9bb2cb6e31fae0f051faaa547e978169b28e548f) |
Dirk Lemstra <dirk@lemstra.org> | no | https://github.com/ImageMagick/ImageMagick/commit/9bb2cb6e31fae0f051faaa547e978169b28e548f | 2026-10-02 | |
| CVE-2026-116150.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8w9c-hj38-8pf9 (cherry picked from commit a63bdd29ebe8439d1bfa51ca4e7890b8b4742560) a memory leak vulnerability in the FPX encoder that allows attackers to exhaust memory by supplying a crafted image. Attackers can submit crafted images for FPX encoding to leak memory repeatedly, causing resource exhaustion and denial of service. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/a63bdd29ebe8439d1bfa51ca4e7890b8b4742560 | 2026-09-29 |
| CVE-2026-116151_1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v9q4-cm37-q2jm (cherry picked from commit b41a6bc92ac778e0459ce500e9d64fb361e29fd5) a memory leak in the JNG encoder that fails to release allocated memory when processing a crafted image. Attackers can supply crafted images that are encoded to JNG to leak memory, potentially causing resource exhaustion and a limited denial of service. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/b41a6bc92ac778e0459ce500e9d64fb361e29fd5 | 2026-09-29 |
| CVE-2026-116151_2.patch | Correct exception that is thrown. (cherry picked from commit fa30495376bba44d29ee1f626ec6055e6c3d6fff) |
Dirk Lemstra <dirk@lemstra.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/fa30495376bba44d29ee1f626ec6055e6c3d6fff | 2026-10-02 | |
| CVE-2026-116154.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8ghq-p369-g395 (cherry picked from commit 33d16f3cf4e0439bba4a874e14c5a3168726ed68) a memory leak in its XML parsing code, where allocated memory is not released when parsing reaches the nesting depth limit. Attackers can supply crafted, deeply nested XML data to trigger the leak, causing memory exhaustion and denial of service. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/33d16f3cf4e0439bba4a874e14c5a3168726ed68 | 2026-09-28 |
| GHSA-vj7g-384h-64fv.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vj7g-384h-64fv (cherry picked from commit 06aa7431e28113c9a895b709cca3e10850d95a58) |
Cristy <urban-warrior@imagemagick.org> | no | upstream, https://github.com/ImageMagick/ImageMagick/commit/06aa7431e28113c9a895b709cca3e10850d95a58 | 2026-10-03 | |
| CVE-2026-105083_1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jjp4-3fwf-393j (cherry picked from commit 1926ccf119141c26274c120d1899dffae19b0c71) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/1926ccf119141c26274c120d1899dffae19b0c71 | 2026-09-05 |
| CVE-2026-105083_2.patch | check for '>' terminator on DOCTYPE (cherry picked from commit 3cb153f2112a183316769387e52d784b87ce877d) |
Cristy <urban-warrior@imagemagick.org> | no | https://github.com/ImageMagick/ImageMagick/commit/3cb153f2112a183316769387e52d784b87ce877d | 2026-09-06 | |
| CVE-2026-105083_3.patch | revert (cherry picked from commit 08328d8343e441a073d1b56e0e4ebac2c02fac28) |
Cristy <urban-warrior@imagemagick.org> | no | https://github.com/ImageMagick/ImageMagick/commit/08328d8343e441a073d1b56e0e4ebac2c02fac28 | 2026-09-06 | |
| CVE-2026-105083_4.patch | more robuse DOCTYPE parser (cherry picked from commit 399d4bd3b081f44c7fef78153f65e8cdebed9f1a) |
Cristy <urban-warrior@imagemagick.org> | no | https://github.com/ImageMagick/ImageMagick/commit/399d4bd3b081f44c7fef78153f65e8cdebed9f1a | 2026-09-06 | |
| CVE-2026-105083_5.patch | continue after parsing DOCTYPE (cherry picked from commit b3b8c0a45c55d680d36ba9189b9b74320f75fd68) |
Cristy <urban-warrior@imagemagick.org> | no | backport, https://github.com/ImageMagick/ImageMagick/commit/b3b8c0a45c55d680d36ba9189b9b74320f75fd68 | 2026-09-19 | |
| CVE-2026-116145_1.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4wfv-467j-fqh9 (cherry picked from commit a75aab27367c4a0e57e137eb6cc5369001c85aec) |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/a75aab27367c4a0e57e137eb6cc5369001c85aec | 2026-10-03 |
| CVE-2026-116156.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7r5g-p7ff-jgcp (cherry picked from commit 9108482a07ca08620021853a14133b9bc6e77054) a memory leak caused by a missing cleanup when the -set profile option is used. An attacker who induces a user to process images with the -set profile option can leak memory, potentially exhausting resources and causing a denial of service. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/9108482a07ca08620021853a14133b9bc6e77054 | 2026-09-28 |
| CVE-2026-116157.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pj4h-g4pf-66v3 (cherry picked from commit eef3af56fbc2dc607e185b8565d695a8d8032d73) a memory leak vulnerability in PerlMagick that fails to free values returned when reading image properties. Attackers can repeatedly trigger property reads through five affected PerlMagick code locations to exhaust memory and cause denial of service. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/eef3af56fbc2dc607e185b8565d695a8d8032d73 | 2026-09-28 |
| CVE-2026-116158.patch | Fix memory leak when SimilarityImage fails (GHSA-m938-565c-h9qf) (cherry picked from commit 8980924dff771df8286cd5311ba0d2c9ef1902ca) |
Dirk Lemstra <dirk@lemstra.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/8980924dff771df8286cd5311ba0d2c9ef1902ca | 2026-09-28 |
| CVE-2026-116159.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-c2qq-jqw7-q4mx (cherry picked from commit 68168e6e5617e4cc478452777586e408f542362b) A memory leak in the handling of the -cdl (color decision list) option, where allocated memory is not cleaned up after use. Attackers can supply input that causes the -cdl option to be processed, repeatedly leaking memory and degrading availability through resource exhaustion. |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | upstream, https://github.com/ImageMagick/ImageMagick/commit/68168e6e5617e4cc478452777586e408f542362b | 2026-09-28 |
| CVE-2026-116160.patch | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6p6q-wfrv-ffhh (cherry picked from commit 09b961e05cdb7caeb923e1736caa340ac26c84ea) [backport] - drop ase coder part that is not present in trixie |
Cristy <urban-warrior@imagemagick.org> | yes | upstream | backport, https://github.com/ImageMagick/ImageMagick/commit/09b961e05cdb7caeb923e1736caa340ac26c84ea | 2026-09-27 |
| policy-7.1.2-34_1.patch | Moved shared logic to a skip a doctype or comment inside xml-tree.c (cherry picked from commit ca9880442eb04f148747757ceb64dfce0a7d5f74) |
Dirk Lemstra <dirk@lemstra.org> | no | https://github.com/ImageMagick/ImageMagick/commit/ca9880442eb04f148747757ceb64dfce0a7d5f74 | 2026-10-04 |
All known versions for source package 'imagemagick'
- 8:7.1.2.35+dfsg1-2 (sid)
- 8:7.1.2.34+dfsg1-1 (forky)
- 8:7.1.1.43+dfsg1-1+deb13u14 (trixie-proposed-updates, trixie-security)
- 8:7.1.1.43+dfsg1-1+deb13u12 (trixie)
- 8:6.9.11.60+dfsg-1.6+deb12u15 (bookworm-security)
- 8:6.9.11.60+dfsg-1.6+deb12u11 (bookworm)