[CLSA-2026:1792547230] ImageMagick: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-21 04:47:19 UTC
Description:
- CVE-2026-109259: fix uninitialized memory read in the TGA decoder - CVE-2026-106578: fix invalid memory free in the MVG decoder on undersized primitive extent
CVEs fixed:
Updated packages:
  • ImageMagick-6.9.10.68-7.0.11.el7_9.tuxcare.els6.i686.rpm
    sha:e75fcb7e72403f9991cebd2c73b8179990bddd8b1ead6447e6ea3789a2b2a60b
  • ImageMagick-6.9.10.68-7.0.11.el7_9.tuxcare.els6.x86_64.rpm
    sha:172cfcdd41509730f0e2e991aae44519a347ac41a534033a57b9572326e020cf
  • ImageMagick-c++-6.9.10.68-7.0.11.el7_9.tuxcare.els6.i686.rpm
    sha:316f62c1c4367706da722ebb21b989748e1030ce33248858a675956d4154f2ce
  • ImageMagick-c++-6.9.10.68-7.0.11.el7_9.tuxcare.els6.x86_64.rpm
    sha:365c6a4b39925784856dfa83a73c3621dec55c08faa425a8969bbb5714782da6
  • ImageMagick-c++-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els6.i686.rpm
    sha:2005e395afeedae74af3e3fbf51a85c4c2d44ebbe4665e6c0e3f326ca142a699
  • ImageMagick-c++-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els6.x86_64.rpm
    sha:f2d64d46e6e8aa6ad4767dbe9fa4805c52519ade1772827cd8b507227116018d
  • ImageMagick-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els6.i686.rpm
    sha:bff5b71d0017af849bb2f068eb73953302f8693f4fcb56859fb8beab1720ed56
  • ImageMagick-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els6.x86_64.rpm
    sha:abb50ef7efd5089a8ebd5b04d4d86ecba93a98e0e0e81d045e2aba6235e202e3
  • ImageMagick-doc-6.9.10.68-7.0.11.el7_9.tuxcare.els6.i686.rpm
    sha:f4f3fd635c55db9d4170cc9e7e400fd3267d609875936709c755054fdf9fcd19
  • ImageMagick-doc-6.9.10.68-7.0.11.el7_9.tuxcare.els6.x86_64.rpm
    sha:f14d6db4660c8306703e17db7c55af8f3d9220b8b364f96b04753ae2d2bf066e
  • ImageMagick-perl-6.9.10.68-7.0.11.el7_9.tuxcare.els6.i686.rpm
    sha:6d699dbba4658ca0e6fd9a1d79927881962c65ba32055fd73e879fded63045c7
  • ImageMagick-perl-6.9.10.68-7.0.11.el7_9.tuxcare.els6.x86_64.rpm
    sha:89274ae6617af0b23299a8dcda18a9a6078aec004b7acbd1f8b394fa3e394d5a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.