← Back to blog

Ubuntu Patches Critical ImageMagick Vulnerabilities in Latest Update

Multiple high-severity flaws in ImageMagick affect several Ubuntu LTS versions, potentially leading to DoS, remote code execution, and data leaks.

TL;DR

  • Ubuntu releases USN-8739-2 to patch ImageMagick vulnerabilities in 24.04 LTS.
  • Flaws include denial of service, arbitrary code execution, and sensitive data exposure.
  • Affects multiple Ubuntu LTS versions including 20.04, 22.04, and 26.04.
  • Attackers could exploit image processing features to compromise systems.
  • Organizations using ImageMagick should update immediately.

Ubuntu has released security update USN-8739-2, addressing multiple vulnerabilities in ImageMagick that affect various long-term support (LTS) versions of the operating system. These flaws range from denial of service to potential remote code execution, making them critical for organizations relying on image processing capabilities.

ImageMagick is widely used in web applications for handling and manipulating images. The identified issues stem from improper handling of certain image files, which can be exploited by attackers to compromise system integrity. The latest update extends previous fixes to Ubuntu 24.04 LTS, ensuring broader protection across supported platforms.

Vulnerability Overview

  • CVE-2026-56366, CVE-2026-56368, CVE-2026-56371, and CVE-2026-56373 lead to denial of service when malformed images are processed.
  • CVE-2026-56370 allows attackers to execute arbitrary code, affecting Ubuntu 22.04 and 26.04 LTS.
  • CVE-2026-56378 may result in sensitive information disclosure, impacting older Ubuntu LTS versions through 22.04.
  • All exploits hinge on the way ImageMagick parses specially crafted image files.

Impact and Recommendations

  • Systems running Ubuntu 14.04–24.04 that use ImageMagick are potentially vulnerable.
  • Web applications accepting user-uploaded images are at higher risk of exploitation.
  • Immediate upgrade to the patched version is recommended to prevent service disruption or breaches.
  • Developers should validate and sanitize all image inputs before processing with ImageMagick.
  • Review ImageMagick policies and restrict resource usage to limit impact of future flaws.

Sources

Sources

Security email updates

One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.