Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
ImageMagick can run out of memory when opening some images
published 3 months ago
Summary
The ImageMagick graphics tool may leak memory if it fails to open certain image data, which can eventually slow down or crash the program. This affects all ImageMagick packages from Canonical. Updating to the latest package version from your distribution will fix the issue.
What to do
- Update canonical imagemagick to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical imagemagick-6-common to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical imagemagick-6-doc to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical imagemagick-6.q16 to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical imagemagick-6.q16hdri to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical imagemagick-common to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical imagemagick-doc to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical libimage-magick-perl to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical libimage-magick-q16-perl to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical libimage-magick-q16hdri-perl to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical libmagick++-6-headers to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical libmagick++-6.q16-7 to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical libmagick++-6.q16-dev to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical libmagick++-6.q16hdri-7 to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical libmagick++-6.q16hdri-dev to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical libmagick++-dev to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical libmagickcore-6-arch-config to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical libmagickcore-6-headers to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical libmagickcore-6.q16-3 to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical libmagickcore-6.q16-3-extra to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical libmagickcore-6.q16-dev to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical libmagickcore-6.q16hdri-3 to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical libmagickcore-6.q16hdri-3-extra to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical libmagickcore-6.q16hdri-dev to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical libmagickcore-dev to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical libmagickwand-6-headers to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical libmagickwand-6.q16-3 to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical libmagickwand-6.q16-dev to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical libmagickwand-6.q16hdri-3 to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical libmagickwand-6.q16hdri-dev to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical libmagickwand-dev to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
- Update canonical perlmagick to version 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Ubuntu:18.04 | canonical | imagemagick |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | imagemagick-6-common |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | imagemagick-6-doc |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | imagemagick-6.q16 |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | imagemagick-6.q16hdri |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | imagemagick-common |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | imagemagick-doc |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | libimage-magick-perl |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | libimage-magick-q16-perl |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | libimage-magick-q16hdri-perl |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | libmagick++-6-headers |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | libmagick++-6.q16-7 |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | libmagick++-6.q16-dev |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | libmagick++-6.q16hdri-7 |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | libmagick++-6.q16hdri-dev |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | libmagick++-dev |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | libmagickcore-6-arch-config |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | libmagickcore-6-headers |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | libmagickcore-6.q16-3 |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | libmagickcore-6.q16-3-extra |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | libmagickcore-6.q16-dev |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | libmagickcore-6.q16hdri-3 |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | libmagickcore-6.q16hdri-3-extra |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | libmagickcore-6.q16hdri-dev |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | libmagickcore-dev |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | libmagickwand-6-headers |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | libmagickwand-6.q16-3 |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | libmagickwand-6.q16-dev |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | libmagickwand-6.q16hdri-3 |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | libmagickwand-6.q16hdri-dev |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | libmagickwand-dev |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
| TuxCare:Ubuntu:18.04 | canonical | perlmagick |
< 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45 Fix: upgrade to 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els45
|
Original advisory text
Fix CVE(s): CVE-2025-43965, CVE-2026-61866
* SECURITY UPDATE: memory leak in the JNG encoder when opening the alpha blob fails
- debian/patches/CVE-2026-61866.patch: destroy the cloned jpeg_image and
jpeg_image_info before raising the writer exception in
WriteOneJNGImage() in coders/png.c
- CVE-2026-61866
- debian/patches/CVE-2026-61866.patch: destroy the cloned jpeg_image and
jpeg_image_info before raising the writer exception in
WriteOneJNGImage() in coders/png.c
- CVE-2026-61866
References
- https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1784621612.html Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-43965 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-61866 Vendor Advisory
Timeline
Published21 Jul 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1784621612 · OSV
Track software like this
Free during beta