Home / mailings [gentoo-announce] [ GLSA 202611-05 ] ImageMagick: Multiple Vulnerabilities
Posted on 12 November 2026
Gentoo-announce- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 202611-05
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
https://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Severity: High
Title: ImageMagick: Multiple Vulnerabilities
Date: November 12, 2026
Bugs: #963606, #972688, #983405, #986125
ID: 202611-05
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Synopsis
========
Multiple vulnerabilities have been found in ImageMagick, the worst of
which could result in arbitrary code execution.
Background
==========
ImageMagick is a software suite to create, edit, and compose bitmap
images, that can also read, write, and convert images in many other
formats.
Affected packages
=================
Package Vulnerable Unaffected
--------------------- ------------ ------------
media-gfx/imagemagick < 7.1.2.35 >= 7.1.2.35
Description
===========
Multiple vulnerabilities have been discovered in ImageMagick. Please
review the CVE identifiers referenced below for details.
Impact
======
Please review the referenced CVE identifiers for details.
Workaround
==========
There is no known workaround at this time.
Resolution
==========
All ImageMagick users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=media-gfx/imagemagick-7.1.2.35"
References
==========
[ 1 ] CVE-2025-55154
https://nvd.nist.gov/vuln/detail/CVE-2025-55154
[ 2 ] CVE-2025-55160
https://nvd.nist.gov/vuln/detail/CVE-2025-55160
[ 3 ] CVE-2025-55212
https://nvd.nist.gov/vuln/detail/CVE-2025-55212
[ 4 ] CVE-2025-55298
https://nvd.nist.gov/vuln/detail/CVE-2025-55298
[ 5 ] CVE-2025-57803
https://nvd.nist.gov/vuln/detail/CVE-2025-57803
[ 6 ] CVE-2025-57807
https://nvd.nist.gov/vuln/detail/CVE-2025-57807
[ 7 ] CVE-2026-34238
https://nvd.nist.gov/vuln/detail/CVE-2026-34238
[ 8 ] GHSA-23hg-53q6-hqfg
[ 9 ] GHSA-2pc3-3339-3qc9
[ 10 ] GHSA-3pf7-cjfr-3fpq
[ 11 ] GHSA-5222-mhv9-26rg
[ 12 ] GHSA-528x-2384-jmxp
[ 13 ] GHSA-5jf2-9gcp-q234
[ 14 ] GHSA-5jwm-r7f4-4m53
[ 15 ] GHSA-5v9f-r478-x7vx
[ 16 ] GHSA-67p3-xhc7-g797
[ 17 ] GHSA-6hgw-6x87-578x
[ 18 ] GHSA-6p6q-wfrv-ffhh
[ 19 ] GHSA-6xcw-8jvx-wh63
[ 20 ] GHSA-7438-vh5v-v52h
[ 21 ] GHSA-79p5-w6jv-r997
[ 22 ] GHSA-7f2w-c8wf-xvf8
[ 23 ] GHSA-7r5g-p7ff-jgcp
[ 24 ] GHSA-83w9-w85j-h9jc
[ 25 ] GHSA-8ghq-p369-g395
[ 26 ] GHSA-8w9c-hj38-8pf9
[ 27 ] GHSA-9ccg-6pjw-x645
[ 28 ] GHSA-c2qq-jqw7-q4mx
[ 29 ] GHSA-c764-55gw-gj6c
[ 30 ] GHSA-fh55-q5pj-pxgw
[ 31 ] GHSA-fp46-842c-2v83
[ 32 ] GHSA-g5j8-ff59-wp88
[ 33 ] GHSA-gr4q-6v79-qj3g
[ 34 ] GHSA-h3qx-937j-245g
[ 35 ] GHSA-h9f8-qmvx-p39m
[ 36 ] GHSA-hpjv-7vmp-f58w
[ 37 ] GHSA-j2rp-5r6m-f7x8
[ 38 ] GHSA-j657-rmv3-4m94
[ 39 ] GHSA-m2p5-qpx9-5mx6
[ 40 ] GHSA-m938-565c-h9qf
[ 41 ] GHSA-m9p2-wqc3-mj22
[ 42 ] GHSA-mf84-8w53-2f2c
[ 43 ] GHSA-mqmp-r5jh-jx7w
[ 44 ] GHSA-mxvv-97wh-cfmm
[ 45 ] GHSA-p58q-7cv7-7w3m
[ 46 ] GHSA-pj4h-g4pf-66v3
[ 47 ] GHSA-pp97-v3gv-9vh4
[ 48 ] GHSA-pwpf-8799-94cj
[ 49 ] GHSA-q66g-3m63-78mh
[ 50 ] GHSA-qp29-wxp5-wh82
[ 51 ] GHSA-qq8x-fq3x-43h4
[ 52 ] GHSA-v5f5-4v9x-p3f2
[ 53 ] GHSA-v86v-4xf8-xjq4
[ 54 ] GHSA-v9q4-cm37-q2jm
[ 55 ] GHSA-vm77-q83h-5fhg
[ 56 ] GHSA-w67p-4ppm-gmrg
[ 57 ] GHSA-wvfx-g9wq-253w
[ 58 ] GHSA-x258-xjqf-6j3f
[ 59 ] GHSA-x3j8-cjwr-m4pv
[ 60 ] GHSA-x48p-6655-8qgv
[ 61 ] GHSA-xvqp-rcj6-3h2q
Availability
============
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
https://security.gentoo.org/glsa/202611-05
Concerns?
=========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users' machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
https://bugs.gentoo.org.
License
=======
Copyright 2026 Gentoo Authors; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license (CC-BY-SA-4.0).
https://creativecommons.org/licenses/by-sa/4.0
--===============4255955075795818542==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
