Vulnerabilities & Exploits

Debian Fixes 34 ImageMagick Flaws in Trixie Update

Debian released DSA-6158-1 addressing 34 ImageMagick vulnerabilities. Flaws can cause information disclosure, security-policy bypass, denial-of-service, or arbitrary code execution.

1 source · Mar 10

CVEs in this update

25 CVEs

Across ImageMagick.

0 critical · 5 high · 20 medium · 0 low

0 in CISA KEV · 0 with EPSS above 1%

Highest severity: CVE-2026-25965 · 8.6 HIGH

Highest EPSS: CVE-2026-25965 · 0.67%

Showing the top 10 by KEV, EPSS, and severity.

Timeline

• Mar 10 Reported by Debian Security Advisories
• CVE-2026-25989 EPSS surged to 0.6%

Sources

• Mar 10 Debian Security Advisories

  SECURITY] [DSA 6159-1] imagemagick security update

  SECURITY] [DSA 6159-1] imagemagick security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6159-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 10, 2026 https://www.debian.org/security/faq - Package…

  original

• Mar 9 Debian Security Advisories

  SECURITY] [DSA 6158-1] imagemagick security update

  SECURITY] [DSA 6158-1] imagemagick security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6158-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 09, 2026 https://www.debian.org/security/faq - Package…

  original

Part of the PlainSec briefing for 2026-03-09

Every edition of this story: Debian Fixes 34 ImageMagick Flaws in Trixie Update

More from today

• UAT-8616 activity affects Cisco Catalyst SD-WAN Controller