Skip to content

GHSA-9x6f-98x9-rx6g on Cyberus Linux 26.05 (unsupported)

Aliases: GHSA-9x6f-98x9-rx6g

Packages: imagemagick

Status: Resolved

Advisory Information

A symlink swap between check-time and use-time can bypass policy-denied write in the video decoder.

Updates

2026-09-07 16:57 CEST

Metadata changes:

  • Status for package imagemagick: “Resolved” (db8f18cd6af33c89e57adb57ec86217895c12b5c)

Comment:

Fixed by update to 7.1.2-30

2026-08-24 10:36 CEST

Metadata changes:

  • Status for package imagemagick: “Plausible”

2026-08-24 09:53 CEST

Metadata changes:

  • Status for package imagemagick: “New”