Advisories » MGASA-2026-0414

Updated imagemagick package fixes security vulnerabilities

Publication date: 17 Sep 2026
Modification date: 17 Sep 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-86420 , CVE-2026-86421 , CVE-2026-86423 , CVE-2026-86424 , CVE-2026-86425

Description

Heap-use-after-free in Layer method of PerlMagick could result in a
crash
Path Policy TOCTOU symlink race bypass in the video decoder
Heap-use-after-free in the GetList method of PerlMagick could result in
a crash
Memory Leak in MSL decoder
Denial of service when exhausting the process memory budget
Policy Bypass in UHDR encoder
Division by Zero in FLIF encoder
Null Pointer Dereference in PNM coder when hitting a memory limit
Policy Bypass in PCD, CUBE and HALD decoder when using a specific
command line option.
Use after free in ImagesToBlob method
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36167
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-chf5-8rv9-gjqr
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9x6f-98x9-rx6g
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5m9j-96ff-j6qc
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4jv7-q6xw-6f4x
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4mwf-mggw-29vp
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7hjx-392p-f8cm
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4gg2-hfgh-6f5c
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-92rw-c5mw-27v4
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-89wq-f8f6-2j2v
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3rjr-534c-8v67
• https://www.cve.org/CVERecord?id=CVE-2026-86420
• https://www.cve.org/CVERecord?id=CVE-2026-86421
• https://www.cve.org/CVERecord?id=CVE-2026-86423
• https://www.cve.org/CVERecord?id=CVE-2026-86424
• https://www.cve.org/CVERecord?id=CVE-2026-86425

SRPMS

10/core

• imagemagick-7.1.2.31-1.mga10

10/tainted

• imagemagick-7.1.2.31-1.mga10.tainted