CLSA-2026-1792591590 ImageMagick: Fix of 7 CVEs

CVE-2026-105081: deny dangling/looping symlinks in path policy checks - CVE-2026-105403: check the coder policy against the coder actually used also CVE-2026-106579 - CVE-2026-105404: escape labels written into PostScript/PDF output - CVE-2026-105823: apply the path policy to CUT palette files...

CLSA-2026-1792591008 ImageMagick: Fix of 8 CVEs

CVE-2026-105081: deny dangling/looping symlinks in path policy checks - CVE-2026-105403: check the coder policy against the coder actually used also CVE-2026-106579 - CVE-2026-105404: escape labels written into PostScript/PDF output - CVE-2026-105823: apply the path policy to CUT palette files...

SUSE CVE-2026-106566

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, delegate symlink cleanup does not check the MAGICKSHREDPASSES environment variable, allowing a local privileged workflow to overwrite a file with random data. This issue is fixed in...

CVE-2026-106566

A flaw was found in ImageMagick. During the cleanup of temporary symbolic links symlinks used by delegate programs, the application fails to properly check the MAGICKSHREDPASSES environment variable. A local privileged user can exploit this vulnerability to overwrite files with random data,...

UNIX Symbolic Link (Symlink) Following

Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following in the delegate process when symlink cleanup does not properly check the MAGICKSHREDPASSES environment variable. An attacker can overwrite arbitrary files with random data by leveraging a local...

CVE-2026-106566

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, delegate symlink cleanup does not check the MAGICKSHREDPASSES environment variable, allowing a local privileged workflow to overwrite a file with random data. This issue is fixed in...

DEBIAN-CVE-2026-106566

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, delegate symlink cleanup does not check the MAGICKSHREDPASSES environment variable, allowing a local privileged workflow to overwrite a file with random data. This issue is fixed in...

CVE-2026-106566 ImageMagick: Policy Bypass in delegate symlink cleanup due to missing check

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, delegate symlink cleanup does not check the MAGICKSHREDPASSES environment variable, allowing a local privileged workflow to overwrite a file with random data. This issue is fixed in...

CVE-2026-106566: UNIX Symbolic Link (Symlink) Following

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, delegate symlink cleanup does not check the MAGICKSHREDPASSES environment variable, allowing a local privileged workflow to overwrite a file with random data. This issue is fixed in...