Back Linuxsecurity

Debian LTS Imagemagick Critical Code Execution Denial of Service DLA-4643

Linuxsecurity •LinuxSecurity Advisories • June 23, 2026

For Debian 11 bullseye, these problems have been fixed in version 8:6.9.11.60+dfsg-1.3+deb11u14. For Debian 12 bookworm, these problems have been fixed in version 8:6.9.11.60+dfsg-1.6+deb12u11. We recommend that you upgrade your imagemagick packages. For the detailed security status of imagemagick please refer to its security tracker page at: Further information Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at:

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Denial of Service Vulnerabilities in Debian Imagemagick Packages Recent security advisories have identified critical Denial of Service (DoS) vulnerabilities in Imagemagick packages affecting Debian distributions. Debian 11 (bullseye) and Debian 12 (bookworm) have patched these vulnerabilities in versions 8:6.9.11.60+dfsg-1.3+deb11u14 and 8:6.9.11.60+dfsg-1.6+deb12u11, respectively. Additionally, the stable distribution (trixie) has addressed similar issues in version 8:7.1.1.43+dfsg1-1+deb13u10. Users are strongly advised to upgrade their Imagemagick packages to mitigate potential exploitation. The vulnerabilities could lead to service disruptions, impacting users relying on these packages for image processing tasks. Specific CVEs were not disclosed in the articles, but the advisories emphasize the urgency of applying updates. The security status of Imagemagick can be tracked through Debian's security tracker page. 2 sources 72

Extracted Entities

Debian LTS Imagemagick Critical Code Execution Denial of Service DLA-4643

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Platforms (2)