[DSA 6356-1] imagemagick security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6356-1                   [email protected]
https://www.debian.org/security/                       Moritz Muehlenhoff
June 21, 2026                         https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : imagemagick
CVE ID         : CVE-2026-48724 CVE-2026-48734 CVE-2026-48994 CVE-2026-49218 
                 CVE-2026-49219 CVE-2026-53460 CVE-2026-53461 CVE-2026-53463 
                 CVE-2026-53464
Debian Bug     : 1140176

Multiple security vulnerabilities were discovered in imagemagick, a
software suite used for editing and manipulating digital images, which
could lead to denial of service, information disclosure or potentially
arbitrary code execution if malformed images are processed.

For the stable distribution (trixie), these problems have been fixed in
version 8:7.1.1.43+dfsg1-1+deb13u10.

We recommend that you upgrade your imagemagick packages.

For the detailed security status of imagemagick please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/imagemagick

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----
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=c7SJ
-----END PGP SIGNATURE-----