USN-8739-1：ImageMagick 多个安全漏洞

Ubuntu 安全公告 USN-8739-1（2026-09-08 发布）披露了 ImageMagick 及其关联软件包的多个安全漏洞。公告涉及以下 Ubuntu 发行版：14.04 LTS（trusty）、16.04 LTS（xenial）、18.04 LTS（bionic）、20.04 LTS（focal）、22.04 LTS（jammy）和 26.04 LTS（resolute）。各 CVE 的影响范围未必覆盖全部所列发行版，具体以官方公告为准。

涉及的软件包

公告涉及的软件包包括 imagemagick、imagemagick-common、imagemagick-6-common、imagemagick-7-common、imagemagick-doc、imagemagick-6.q16、imagemagick-6.q16hdri、imagemagick-7.q16、imagemagick-7.q16hdri、perlmagick、libimage-magick-perl、libimage-magick-q16-perl、libimage-magick-q16hdri-perl、libmagickcore5、libmagickwand5、libmagick++5，以及 libmagickcore-6/7、libmagickwand-6/7、libmagick++-6/7 的 q16/q16hdri、dev、extra 等相关软件包。

涉及的 CVE

公告列出的 CVE 标识符包括以下 15 个：

  • CVE-2026-56366
  • CVE-2026-56368
  • CVE-2026-56370
  • CVE-2026-56371
  • CVE-2026-56373
  • CVE-2026-56378
  • CVE-2026-56379
  • CVE-2026-61465
  • CVE-2026-61857
  • CVE-2026-61863
  • CVE-2026-61864
  • CVE-2026-61865
  • CVE-2026-61866
  • CVE-2026-61870
  • CVE-2026-62946

修复版本

修复版本需通过 Ubuntu Pro/ESM 获取，访问要求见官方公告。公告中给出的修复版本包括：

  • 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14
  • 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm14
  • 8:6.9.7.4+dfsg-16ubuntu6.15+esm16
  • 8:6.7.7.10-6ubuntu3.13+esm25
  • 8:6.8.9.9-7ubuntu5.16+esm24
  • 8:7.1.2.18+dfsg1-1ubuntu0.1~esm2

官方公告：https://ubuntu.com/security/notices/USN-8739-1

原文中的受保护标识符

以下标识符来自公告原文，按原样保留：

"editorialLimits": "Use only these verified fields. No inferred features, upgrade commands, affected-version ranges or support deadlines. A release announcement does not establish distribution package availability. For security fixes preserve the exact distribution, package version and Pro/ESM access requirements; CVEs do not imply every listed release is affected by every issue."
"officialSource": "https://ubuntu.com/security/notices/USN-8739-1",
"version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14",
"version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm14",
"access": "Ubuntu Pro / ESM (see official notice)"
"version": "8:6.9.7.4+dfsg-16ubuntu6.15+esm16",
"version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm2",
"package": "libmagickcore-7.q16hdri-10-extra",
"announcementDate": "2026-09-08 18:30:19+00",
"package": "libmagickcore-6.q16hdri-6-extra",
"package": "libmagickcore-6.q16hdri-3-extra",
"package": "libimage-magick-q16hdri-perl",
"package": "libmagickcore-7.q16-10-extra",
"version": "8:6.7.7.10-6ubuntu3.13+esm25",
"package": "libmagickcore-7-arch-config",
"package": "libmagickcore-7.q16hdri-dev",
"package": "libmagickwand-7.q16hdri-dev",
"package": "libmagickcore-6-arch-config",
"package": "libmagickcore-6.q16-6-extra",
"package": "libmagickcore-6.q16hdri-dev",
"package": "libmagickwand-6.q16hdri-dev",
"package": "libmagickcore-6.q16-3-extra",
"version": "8:6.8.9.9-7ubuntu5.16+esm24",
"package": "libmagickcore-6.q16-2-extra",
"package": "libmagickcore-7.q16hdri-10",
"package": "libmagickwand-7.q16hdri-10",
"package": "libmagick++-7.q16hdri-dev",
"package": "libmagick++-6.q16hdri-dev",
"package": "libmagickcore-6.q16hdri-6",
"package": "libmagickwand-6.q16hdri-6",
"package": "libmagickcore-6.q16hdri-3",
"package": "libmagickwand-6.q16hdri-3",
"package": "libimage-magick-q16-perl",
"package": "libmagick++-7.q16hdri-5",
"package": "libmagickcore-7-headers",
"package": "libmagickcore-7.q16-dev",
"package": "libmagickwand-7-headers",
"package": "libmagickwand-7.q16-dev",
"package": "libmagick++-6.q16hdri-8",
"package": "libmagickcore-6-headers",
"package": "libmagickcore-6.q16-dev",
"package": "libmagickwand-6-headers",
"package": "libmagickwand-6.q16-dev",
"package": "libmagick++-6.q16hdri-7",
"package": "libmagickcore-7.q16-10",
"package": "libmagickwand-7.q16-10",
"package": "imagemagick-7.q16hdri",
"package": "libmagick++-7-headers",
"package": "libmagick++-7.q16-dev",
"package": "imagemagick-6.q16hdri",
"package": "libmagick++-6-headers",
"package": "libmagick++-6.q16-dev",
"package": "libmagickcore-6.q16-6",
"package": "libmagickwand-6.q16-6",
"package": "libmagickcore-6.q16-3",
"package": "libmagickwand-6.q16-3",
"package": "libmagick++-6.q16-5v5",
"package": "libmagickcore-6.q16-2",
"package": "libmagickwand-6.q16-2",
"package": "imagemagick-7-common",
"package": "libimage-magick-perl",
"package": "imagemagick-6-common",
"package": "libmagickcore5-extra",
"package": "libmagick++-7.q16-5",
"package": "libmagick++-6.q16-8",
"package": "libmagick++-6.q16-7",
"release": "26.04 LTS resolute",
"package": "imagemagick-common",
"package": "imagemagick-7-doc",
"package": "imagemagick-7.q16",
"package": "libmagickcore-dev",
"package": "libmagickwand-dev",
"package": "imagemagick-6-doc",
"package": "imagemagick-6.q16",
"release": "18.04 LTS bionic",
"release": "16.04 LTS xenial",
"release": "14.04 LTS trusty",
"package": "libmagick++-dev",
"release": "22.04 LTS jammy",
"package": "imagemagick-doc",
"release": "20.04 LTS focal",
"package": "libmagickcore5",
"package": "libmagickwand5",
"identifier": "USN-8739-1",
"package": "libmagick++5",
"package": "imagemagick",
"package": "perlmagick",
"project": "ubuntu",
"event": "security",
"fixedPackages": [
"CVE-2026-56366",
"CVE-2026-56368",
"CVE-2026-56370",
"CVE-2026-56371",
"CVE-2026-56373",
"CVE-2026-56378",
"CVE-2026-56379",
"CVE-2026-61465",
"CVE-2026-61857",
"CVE-2026-61863",
"CVE-2026-61864",
"CVE-2026-61865",
"CVE-2026-61866",
"CVE-2026-61870",
"version": null,
"CVE-2026-62946"
"cves": [
],
},
{
}