Linux · Ubuntu · Package update · July 29, 2026

imagemagick-6-common 8:6.9.7.4+dfsg-16ubuntu6.15+esm16: imagemagick-6-common 8:6.9.7.4+dfsg-16ubuntu6.15+esm16 for Ubuntu 18.04.6 LTS (bionic)

imagemagick-6-common 8:6.9.7.4+dfsg-16ubuntu6.15+esm16, released July 29, 2026, fixes 14 CVEs in imagemagick-6-common. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
14
None rated Critical
Exploited
0
None reported
Highest CVSS
8.2
Base score, 0 to 10
Highest EPSS
0.0164
76th percentile

Priority of the 14 CVEs

Patch now 0 Urgent 0 High 5 Routine 9

Fixed package versions

ProductReleaseFixed in
imagemagick-6-commonUbuntu 18.04.6 LTS (bionic)8:6.9.7.4+dfsg-16ubuntu6.15+esm16

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2026-56368 ImageMagick: improper memory management can lead to memory leak in multiple coders that write raw pixel data7.5 0.0046 None reported
High CVE-2026-56378 imagemagick: ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap out-of-bounds read in the PCD coder's DecodeIm...8.2 0.0039 None reported
High CVE-2026-61870 imagemagick: ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails7.5 0.0019 None reported
High CVE-2026-61863 imagemagick: ImageMagick before 7.1.2-26 (and 6.x before 6.9.13-51) contains a memory leak in the TIFF encoder that occurs when a...7.5 0.0019 None reported
High CVE-2026-61866 imagemagick: ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the JNG encoder when a blob cannot be opened7.5 0.0019 None reported
Routine CVE-2026-56379 ImageMagick: Extend patch by f63c78b (bsc#1268878).n/a 0.0164 None reported
Routine CVE-2026-56371 ImageMagick: memory leak in `coders/txt.c` when processing TXT files with texture attributes (bsc#1268879).n/a 0.0044 None reported
Routine CVE-2026-56373 ImageMagick: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).5.3 0.0023 None reported
Routine CVE-2026-40312 ImageMagick: Denial of Service via malicious MSL file processing (bsc#1262149).5.5 0.0018 None reported
Routine CVE-2026-61465 imagemagick: ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation limit in matrix-backed...6.5 0.0017 None reported
Routine CVE-2026-56366 ImageMagick: META reader memory leak in the APP1JPEG input path (bsc#1271316).6.5 0.0017 None reported
Routine CVE-2026-62946 imagemagick: ImageMagick is free and open-source software used for editing and manipulating digital images4.7 0.0012 None reported
Routine CVE-2026-61864 imagemagick: ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in color transformation to the log colorspace: when...n/a 0.0010 None reported
Routine CVE-2026-61865 imagemagick: ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the hough lines operation: when a specific operat...n/a 0.0010 None reported
Showing 1 to 14 of 14 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.