OESA-2026-1502

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-1502

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2026-1502.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2026-1502

Upstream

CVE-2026-27798

CVE-2026-27799

Published

2026-03-06T12:41:30Z

Modified

2026-03-06T13:15:16.424768Z

Summary

ImageMagick security update

Details

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.

Security Fix(es):

ImageMagick is an open-source software suite for image processing. A heap buffer over-read vulnerability exists in its WaveletDenoise module when processing certain small-sized images. An attacker could exploit this vulnerability by crafting a malicious image file, potentially causing the application to crash (denial of service) or, under specific conditions, leaking sensitive information from the process memory.(CVE-2026-27798)

ImageMagick is a widely used open-source software suite for image processing. A vulnerability exists in its DjVu decoder where an out-of-bounds read can occur when processing a specially crafted DjVu image file. An attacker could exploit this by tricking a user into processing a malicious DjVu file, potentially leading to information disclosure, application crash, or denial of service. This vulnerability has been disclosed in a GitHub Security Advisory.(CVE-2026-27799)

Database specific

{
    "severity": "Medium"
}

References

Affected packages

openEuler:20.03-LTS-SP4

ImageMagick

Package

Name: ImageMagick
Purl: pkg:rpm/openEuler/ImageMagick&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.9.13.40-1.oe2003sp4

Ecosystem specific

{
    "noarch": [
        "ImageMagick-help-6.9.13.40-1.oe2003sp4.noarch.rpm"
    ],
    "x86_64": [
        "ImageMagick-6.9.13.40-1.oe2003sp4.x86_64.rpm",
        "ImageMagick-c++-6.9.13.40-1.oe2003sp4.x86_64.rpm",
        "ImageMagick-c++-devel-6.9.13.40-1.oe2003sp4.x86_64.rpm",
        "ImageMagick-debuginfo-6.9.13.40-1.oe2003sp4.x86_64.rpm",
        "ImageMagick-debugsource-6.9.13.40-1.oe2003sp4.x86_64.rpm",
        "ImageMagick-devel-6.9.13.40-1.oe2003sp4.x86_64.rpm",
        "ImageMagick-perl-6.9.13.40-1.oe2003sp4.x86_64.rpm"
    ],
    "aarch64": [
        "ImageMagick-6.9.13.40-1.oe2003sp4.aarch64.rpm",
        "ImageMagick-c++-6.9.13.40-1.oe2003sp4.aarch64.rpm",
        "ImageMagick-c++-devel-6.9.13.40-1.oe2003sp4.aarch64.rpm",
        "ImageMagick-debuginfo-6.9.13.40-1.oe2003sp4.aarch64.rpm",
        "ImageMagick-debugsource-6.9.13.40-1.oe2003sp4.aarch64.rpm",
        "ImageMagick-devel-6.9.13.40-1.oe2003sp4.aarch64.rpm",
        "ImageMagick-perl-6.9.13.40-1.oe2003sp4.aarch64.rpm"
    ],
    "src": [
        "ImageMagick-6.9.13.40-1.oe2003sp4.src.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-1502.json"

openEuler:22.03-LTS-SP4

ImageMagick

Package

Name: ImageMagick
Purl: pkg:rpm/openEuler/ImageMagick&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.1.2.15-1.oe2203sp4

Ecosystem specific

{
    "noarch": [
        "ImageMagick-help-7.1.2.15-1.oe2203sp4.noarch.rpm"
    ],
    "x86_64": [
        "ImageMagick-7.1.2.15-1.oe2203sp4.x86_64.rpm",
        "ImageMagick-c++-7.1.2.15-1.oe2203sp4.x86_64.rpm",
        "ImageMagick-c++-devel-7.1.2.15-1.oe2203sp4.x86_64.rpm",
        "ImageMagick-debuginfo-7.1.2.15-1.oe2203sp4.x86_64.rpm",
        "ImageMagick-debugsource-7.1.2.15-1.oe2203sp4.x86_64.rpm",
        "ImageMagick-devel-7.1.2.15-1.oe2203sp4.x86_64.rpm",
        "ImageMagick-perl-7.1.2.15-1.oe2203sp4.x86_64.rpm"
    ],
    "aarch64": [
        "ImageMagick-7.1.2.15-1.oe2203sp4.aarch64.rpm",
        "ImageMagick-c++-7.1.2.15-1.oe2203sp4.aarch64.rpm",
        "ImageMagick-c++-devel-7.1.2.15-1.oe2203sp4.aarch64.rpm",
        "ImageMagick-debuginfo-7.1.2.15-1.oe2203sp4.aarch64.rpm",
        "ImageMagick-debugsource-7.1.2.15-1.oe2203sp4.aarch64.rpm",
        "ImageMagick-devel-7.1.2.15-1.oe2203sp4.aarch64.rpm",
        "ImageMagick-perl-7.1.2.15-1.oe2203sp4.aarch64.rpm"
    ],
    "src": [
        "ImageMagick-7.1.2.15-1.oe2203sp4.src.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-1502.json"

openEuler:24.03-LTS

ImageMagick

Package

Name: ImageMagick
Purl: pkg:rpm/openEuler/ImageMagick&distro=openEuler-24.03-LTS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.1.2.15-1.oe2403sp3

Ecosystem specific

{
    "noarch": [
        "ImageMagick-help-7.1.2.15-1.oe2403.noarch.rpm",
        "ImageMagick-help-7.1.2.15-1.oe2403sp1.noarch.rpm",
        "ImageMagick-help-7.1.2.15-1.oe2403sp2.noarch.rpm",
        "ImageMagick-help-7.1.2.15-1.oe2403sp3.noarch.rpm"
    ],
    "x86_64": [
        "ImageMagick-7.1.2.15-1.oe2403.x86_64.rpm",
        "ImageMagick-c++-7.1.2.15-1.oe2403.x86_64.rpm",
        "ImageMagick-c++-devel-7.1.2.15-1.oe2403.x86_64.rpm",
        "ImageMagick-debuginfo-7.1.2.15-1.oe2403.x86_64.rpm",
        "ImageMagick-debugsource-7.1.2.15-1.oe2403.x86_64.rpm",
        "ImageMagick-devel-7.1.2.15-1.oe2403.x86_64.rpm",
        "ImageMagick-perl-7.1.2.15-1.oe2403.x86_64.rpm",
        "ImageMagick-7.1.2.15-1.oe2403sp1.x86_64.rpm",
        "ImageMagick-c++-7.1.2.15-1.oe2403sp1.x86_64.rpm",
        "ImageMagick-c++-devel-7.1.2.15-1.oe2403sp1.x86_64.rpm",
        "ImageMagick-debuginfo-7.1.2.15-1.oe2403sp1.x86_64.rpm",
        "ImageMagick-debugsource-7.1.2.15-1.oe2403sp1.x86_64.rpm",
        "ImageMagick-devel-7.1.2.15-1.oe2403sp1.x86_64.rpm",
        "ImageMagick-perl-7.1.2.15-1.oe2403sp1.x86_64.rpm",
        "ImageMagick-7.1.2.15-1.oe2403sp2.x86_64.rpm",
        "ImageMagick-c++-7.1.2.15-1.oe2403sp2.x86_64.rpm",
        "ImageMagick-c++-devel-7.1.2.15-1.oe2403sp2.x86_64.rpm",
        "ImageMagick-debuginfo-7.1.2.15-1.oe2403sp2.x86_64.rpm",
        "ImageMagick-debugsource-7.1.2.15-1.oe2403sp2.x86_64.rpm",
        "ImageMagick-devel-7.1.2.15-1.oe2403sp2.x86_64.rpm",
        "ImageMagick-perl-7.1.2.15-1.oe2403sp2.x86_64.rpm",
        "ImageMagick-7.1.2.15-1.oe2403sp3.x86_64.rpm",
        "ImageMagick-c++-7.1.2.15-1.oe2403sp3.x86_64.rpm",
        "ImageMagick-c++-devel-7.1.2.15-1.oe2403sp3.x86_64.rpm",
        "ImageMagick-debuginfo-7.1.2.15-1.oe2403sp3.x86_64.rpm",
        "ImageMagick-debugsource-7.1.2.15-1.oe2403sp3.x86_64.rpm",
        "ImageMagick-devel-7.1.2.15-1.oe2403sp3.x86_64.rpm",
        "ImageMagick-perl-7.1.2.15-1.oe2403sp3.x86_64.rpm"
    ],
    "aarch64": [
        "ImageMagick-7.1.2.15-1.oe2403.aarch64.rpm",
        "ImageMagick-c++-7.1.2.15-1.oe2403.aarch64.rpm",
        "ImageMagick-c++-devel-7.1.2.15-1.oe2403.aarch64.rpm",
        "ImageMagick-debuginfo-7.1.2.15-1.oe2403.aarch64.rpm",
        "ImageMagick-debugsource-7.1.2.15-1.oe2403.aarch64.rpm",
        "ImageMagick-devel-7.1.2.15-1.oe2403.aarch64.rpm",
        "ImageMagick-perl-7.1.2.15-1.oe2403.aarch64.rpm",
        "ImageMagick-7.1.2.15-1.oe2403sp1.aarch64.rpm",
        "ImageMagick-c++-7.1.2.15-1.oe2403sp1.aarch64.rpm",
        "ImageMagick-c++-devel-7.1.2.15-1.oe2403sp1.aarch64.rpm",
        "ImageMagick-debuginfo-7.1.2.15-1.oe2403sp1.aarch64.rpm",
        "ImageMagick-debugsource-7.1.2.15-1.oe2403sp1.aarch64.rpm",
        "ImageMagick-devel-7.1.2.15-1.oe2403sp1.aarch64.rpm",
        "ImageMagick-perl-7.1.2.15-1.oe2403sp1.aarch64.rpm",
        "ImageMagick-7.1.2.15-1.oe2403sp2.aarch64.rpm",
        "ImageMagick-c++-7.1.2.15-1.oe2403sp2.aarch64.rpm",
        "ImageMagick-c++-devel-7.1.2.15-1.oe2403sp2.aarch64.rpm",
        "ImageMagick-debuginfo-7.1.2.15-1.oe2403sp2.aarch64.rpm",
        "ImageMagick-debugsource-7.1.2.15-1.oe2403sp2.aarch64.rpm",
        "ImageMagick-devel-7.1.2.15-1.oe2403sp2.aarch64.rpm",
        "ImageMagick-perl-7.1.2.15-1.oe2403sp2.aarch64.rpm",
        "ImageMagick-7.1.2.15-1.oe2403sp3.aarch64.rpm",
        "ImageMagick-c++-7.1.2.15-1.oe2403sp3.aarch64.rpm",
        "ImageMagick-c++-devel-7.1.2.15-1.oe2403sp3.aarch64.rpm",
        "ImageMagick-debuginfo-7.1.2.15-1.oe2403sp3.aarch64.rpm",
        "ImageMagick-debugsource-7.1.2.15-1.oe2403sp3.aarch64.rpm",
        "ImageMagick-devel-7.1.2.15-1.oe2403sp3.aarch64.rpm",
        "ImageMagick-perl-7.1.2.15-1.oe2403sp3.aarch64.rpm"
    ],
    "src": [
        "ImageMagick-7.1.2.15-1.oe2403.src.rpm",
        "ImageMagick-7.1.2.15-1.oe2403sp1.src.rpm",
        "ImageMagick-7.1.2.15-1.oe2403sp2.src.rpm",
        "ImageMagick-7.1.2.15-1.oe2403sp3.src.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-1502.json"

openEuler:24.03-LTS-SP1

ImageMagick

Package

Name: ImageMagick
Purl: pkg:rpm/openEuler/ImageMagick&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.1.2.15-1.oe2403sp1

Ecosystem specific

{
    "noarch": [
        "ImageMagick-help-7.1.2.15-1.oe2403sp1.noarch.rpm"
    ],
    "x86_64": [
        "ImageMagick-7.1.2.15-1.oe2403sp1.x86_64.rpm",
        "ImageMagick-c++-7.1.2.15-1.oe2403sp1.x86_64.rpm",
        "ImageMagick-c++-devel-7.1.2.15-1.oe2403sp1.x86_64.rpm",
        "ImageMagick-debuginfo-7.1.2.15-1.oe2403sp1.x86_64.rpm",
        "ImageMagick-debugsource-7.1.2.15-1.oe2403sp1.x86_64.rpm",
        "ImageMagick-devel-7.1.2.15-1.oe2403sp1.x86_64.rpm",
        "ImageMagick-perl-7.1.2.15-1.oe2403sp1.x86_64.rpm"
    ],
    "aarch64": [
        "ImageMagick-7.1.2.15-1.oe2403sp1.aarch64.rpm",
        "ImageMagick-c++-7.1.2.15-1.oe2403sp1.aarch64.rpm",
        "ImageMagick-c++-devel-7.1.2.15-1.oe2403sp1.aarch64.rpm",
        "ImageMagick-debuginfo-7.1.2.15-1.oe2403sp1.aarch64.rpm",
        "ImageMagick-debugsource-7.1.2.15-1.oe2403sp1.aarch64.rpm",
        "ImageMagick-devel-7.1.2.15-1.oe2403sp1.aarch64.rpm",
        "ImageMagick-perl-7.1.2.15-1.oe2403sp1.aarch64.rpm"
    ],
    "src": [
        "ImageMagick-7.1.2.15-1.oe2403sp1.src.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-1502.json"

openEuler:24.03-LTS-SP2

ImageMagick

Package

Name: ImageMagick
Purl: pkg:rpm/openEuler/ImageMagick&distro=openEuler-24.03-LTS-SP2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.1.2.15-1.oe2403sp2

Ecosystem specific

{
    "noarch": [
        "ImageMagick-help-7.1.2.15-1.oe2403sp2.noarch.rpm"
    ],
    "x86_64": [
        "ImageMagick-7.1.2.15-1.oe2403sp2.x86_64.rpm",
        "ImageMagick-c++-7.1.2.15-1.oe2403sp2.x86_64.rpm",
        "ImageMagick-c++-devel-7.1.2.15-1.oe2403sp2.x86_64.rpm",
        "ImageMagick-debuginfo-7.1.2.15-1.oe2403sp2.x86_64.rpm",
        "ImageMagick-debugsource-7.1.2.15-1.oe2403sp2.x86_64.rpm",
        "ImageMagick-devel-7.1.2.15-1.oe2403sp2.x86_64.rpm",
        "ImageMagick-perl-7.1.2.15-1.oe2403sp2.x86_64.rpm"
    ],
    "aarch64": [
        "ImageMagick-7.1.2.15-1.oe2403sp2.aarch64.rpm",
        "ImageMagick-c++-7.1.2.15-1.oe2403sp2.aarch64.rpm",
        "ImageMagick-c++-devel-7.1.2.15-1.oe2403sp2.aarch64.rpm",
        "ImageMagick-debuginfo-7.1.2.15-1.oe2403sp2.aarch64.rpm",
        "ImageMagick-debugsource-7.1.2.15-1.oe2403sp2.aarch64.rpm",
        "ImageMagick-devel-7.1.2.15-1.oe2403sp2.aarch64.rpm",
        "ImageMagick-perl-7.1.2.15-1.oe2403sp2.aarch64.rpm"
    ],
    "src": [
        "ImageMagick-7.1.2.15-1.oe2403sp2.src.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-1502.json"

openEuler:24.03-LTS-SP3

ImageMagick

Package

Name: ImageMagick
Purl: pkg:rpm/openEuler/ImageMagick&distro=openEuler-24.03-LTS-SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.1.2.15-1.oe2403sp3

Ecosystem specific

{
    "noarch": [
        "ImageMagick-help-7.1.2.15-1.oe2403sp3.noarch.rpm"
    ],
    "x86_64": [
        "ImageMagick-7.1.2.15-1.oe2403sp3.x86_64.rpm",
        "ImageMagick-c++-7.1.2.15-1.oe2403sp3.x86_64.rpm",
        "ImageMagick-c++-devel-7.1.2.15-1.oe2403sp3.x86_64.rpm",
        "ImageMagick-debuginfo-7.1.2.15-1.oe2403sp3.x86_64.rpm",
        "ImageMagick-debugsource-7.1.2.15-1.oe2403sp3.x86_64.rpm",
        "ImageMagick-devel-7.1.2.15-1.oe2403sp3.x86_64.rpm",
        "ImageMagick-perl-7.1.2.15-1.oe2403sp3.x86_64.rpm"
    ],
    "aarch64": [
        "ImageMagick-7.1.2.15-1.oe2403sp3.aarch64.rpm",
        "ImageMagick-c++-7.1.2.15-1.oe2403sp3.aarch64.rpm",
        "ImageMagick-c++-devel-7.1.2.15-1.oe2403sp3.aarch64.rpm",
        "ImageMagick-debuginfo-7.1.2.15-1.oe2403sp3.aarch64.rpm",
        "ImageMagick-debugsource-7.1.2.15-1.oe2403sp3.aarch64.rpm",
        "ImageMagick-devel-7.1.2.15-1.oe2403sp3.aarch64.rpm",
        "ImageMagick-perl-7.1.2.15-1.oe2403sp3.aarch64.rpm"
    ],
    "src": [
        "ImageMagick-7.1.2.15-1.oe2403sp3.src.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-1502.json"