Linux · Amazon Linux · Security advisory · September 28, 2026

ALAS2023-2026-3115: Security update for 12 packages

ALAS2023-2026-3115, released September 28, 2026, fixes 34 CVEs across 12 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
34
None rated Critical
Exploited
0
None reported
Highest CVSS
7.5
Base score, 0 to 10
Highest EPSS
0.0055
46th percentile

Priority of the 34 CVEs

Patch now 0 Urgent 0 High 6 Routine 28

Fixed package versions

ProductReleaseFixed in
ImageMagickamzn 20231:6.9.13.54-1.amzn2023
ImageMagick-c++amzn 20231:6.9.13.54-1.amzn2023
ImageMagick-c++-debuginfoamzn 20231:6.9.13.54-1.amzn2023
ImageMagick-c++-develamzn 20231:6.9.13.54-1.amzn2023
ImageMagick-debuginfoamzn 20231:6.9.13.54-1.amzn2023
ImageMagick-debugsourceamzn 20231:6.9.13.54-1.amzn2023
ImageMagick-develamzn 20231:6.9.13.54-1.amzn2023
ImageMagick-docamzn 20231:6.9.13.54-1.amzn2023
ImageMagick-libsamzn 20231:6.9.13.54-1.amzn2023
ImageMagick-libs-debuginfoamzn 20231:6.9.13.54-1.amzn2023
ImageMagick-perlamzn 20231:6.9.13.54-1.amzn2023
ImageMagick-perl-debuginfoamzn 20231:6.9.13.54-1.amzn2023

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2026-61861 imagemagick: ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory all...7.5 0.0055 None reported
High CVE-2026-61857 imagemagick: ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XM...7.5 0.0027 None reported
High CVE-2026-61870 imagemagick: ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails7.5 0.0019 None reported
High CVE-2026-61863 imagemagick: ImageMagick before 7.1.2-26 (and 6.x before 6.9.13-51) contains a memory leak in the TIFF encoder that occurs when a...7.5 0.0019 None reported
High CVE-2026-61866 imagemagick: ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the JNG encoder when a blob cannot be opened7.5 0.0019 None reported
High CVE-2026-56361 imagemagick: ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bounds heap buffer...7.1 0.0013 None reported
Routine CVE-2026-61860 imagemagick: ImageMagick before 7.1.2-26 and 6.9.13-51 contains a use-after-free vulnerability that occurs when freetype initializ...n/a 0.0035 None reported
Routine CVE-2026-61871 imagemagick: ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the ICON decoder that occurs when a memory alloca...n/a 0.0035 None reported
Routine CVE-2026-56365 imagemagick: ImageMagick before 7.1.2-19 contains a memory leak vulnerability in the PNG encoder when writing MNG images5.3 0.0028 None reported
Routine CVE-2026-61858 imagemagick: ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to...5.3 0.0025 None reported
Routine CVE-2026-55594 imagemagick: ImageMagick is free and open-source software used for editing and manipulating digital images5.3 0.0024 None reported
Routine CVE-2026-56373 imagemagick: ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when...5.3 0.0023 None reported
Routine CVE-2026-56369 imagemagick: ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due t...n/a 0.0023 None reported
Routine CVE-2026-55577 imagemagick: ImageMagick is free and open-source software used for editing and manipulating digital images5.9 0.0023 None reported
Routine CVE-2026-61868 imagemagick: ImageMagick before 7.1.2-26 and 6.9.x before 6.9.13-51 contains a memory leak in the YUV decoder that occurs when ope...n/a 0.0022 None reported
Routine CVE-2026-53466 imagemagick: ImageMagick is free and open-source software used for editing and manipulating digital images6.5 0.0022 None reported
Routine CVE-2026-64685 imagemagick: ImageMagick is free and open-source software used for editing and manipulating digital images5.3 0.0021 None reported
Routine CVE-2026-53467 imagemagick: ImageMagick is free and open-source software used for editing and manipulating digital images5.3 0.0020 None reported
Routine CVE-2026-56362 imagemagick: ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCa...4.2 0.0019 None reported
Routine CVE-2026-61465 imagemagick: ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation limit in matrix-backed...6.5 0.0017 None reported
Routine CVE-2026-56366 imagemagick: ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths6.5 0.0017 None reported
Routine CVE-2026-56377 imagemagick: ImageMagick before 7.1.2-24 contains an incorrect policy check that allows attackers to create or truncate files disa...n/a 0.0016 None reported
Routine CVE-2026-55510 imagemagick: ImageMagick is free and open-source software used for editing and manipulating digital images5.5 0.0015 None reported
Routine CVE-2026-56363 imagemagick: ImageMagick before 7.1.2-22 contains a division by zero vulnerability in binomial kernel processing that allows attac...n/a 0.0011 None reported
Routine CVE-2026-61862 imagemagick: ImageMagick before 7.1.2-26 and 6.9.13-51 contains an information disclosure vulnerability: when a profile is display...n/a 0.0011 None reported
Showing 1 to 25 of 34 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.