USN-5855-3
imagemagick regression
USN-5855-2 fixed vulnerabilities in ImageMagick. Unfortunately an additional mitigation caused a regression. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that ImageMagick incorrectly handled certain PNG images. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this issue to cause ImageMagick to stop responding, resulting in a denial of service, or possibly obtain the contents of arbitrary files by including them into images.
What each source reports
OSV No score
imagemagick regression
USN-5855-2 fixed vulnerabilities in ImageMagick. Unfortunately an additional mitigation caused a regression. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that ImageMagick incorrectly handled certain PNG images. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this issue to cause ImageMagick to stop responding, resulting in a denial of service, or possibly obtain the contents of arbitrary files by including them into images.
- Record
USN-5855-3- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
imagemagickUbuntu:20.04:LTS |
before 8:6.9.10.23+dfsg-2.1ubuntu11.7, plus listed versions 8:6.9.10.23+dfsg-2.1ubuntu38:6.9.10.23+dfsg-2.1ubuntu88:6.9.10.23+dfsg-2.1ubuntu98:6.9.10.23+dfsg-2.1ubuntu108:6.9.10.23+dfsg-2.1ubuntu11 Show 5 moreShow less8:6.9.10.23+dfsg-2.1ubuntu11.18:6.9.10.23+dfsg-2.1ubuntu11.28:6.9.10.23+dfsg-2.1ubuntu11.48:6.9.10.23+dfsg-2.1ubuntu11.58:6.9.10.23+dfsg-2.1ubuntu11.6 |
8:6.9.10.23+dfsg-2.1ubuntu11.7 |
imagemagickUbuntu:22.04:LTS |
before 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3, plus listed versions 8:6.9.11.60+dfsg-1ubuntu18:6.9.11.60+dfsg-1.38:6.9.11.60+dfsg-1.3build18:6.9.11.60+dfsg-1.3build28:6.9.11.60+dfsg-1.3ubuntu0.22.04.18:6.9.11.60+dfsg-1.3ubuntu0.22.04.2 |
8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-5855-3 is a vulnerability with no CVSS score yet in imagemagick, published March 31, 2023. No source lists public exploit code. Fixed in imagemagick 8:6.9.10.23+dfsg-2.1ubuntu11.7.