CVE-2026-116149 – ImageMagick vulnerability

Hi All,

A new CVE-2026-116149, a high-severity stack buffer overflow in ImageMagick when processing specially crafted bzip2-compressed images.

Affected versions:

• ImageMagick before 6.9.13-58
• ImageMagick 7.x before 7.1.2-33

This could potentially affect DirectAdmin servers using the PHP imagick extension.

Could the DirectAdmin team confirm whether this requires any action within CustomBuild or whether it will be resolved through the AlmaLinux/RHEL packages?

References:

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pwpf-8799-94cj

https://www.cve.org/CVERecord?id=CVE-2026-116149