[CLSA-2026:1792747074] ImageMagick: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-23 23:42:37 UTC
Description:
- CVE-2026-109259: fix uninitialized memory read in the TGA decoder - CVE-2026-106578: fix invalid memory free in the MVG decoder on undersized primitive extent
CVEs fixed:
Updated packages:
  • ImageMagick-6.9.10.68-7.0.11.el7_9.tuxcare.els6.i686.rpm
    sha:b6ff11bc30754875ca3ea8bebd5420e774d86ec6f86ced260dbdc4ea4c32c524
  • ImageMagick-6.9.10.68-7.0.11.el7_9.tuxcare.els6.x86_64.rpm
    sha:098e0615dc50364b085a9105cfebad24c09c16cd5a140a48ea0cd940ce48140d
  • ImageMagick-c++-6.9.10.68-7.0.11.el7_9.tuxcare.els6.i686.rpm
    sha:8e0b051c2345eed338532382c8303073d164b69560e2acde7c03dd9d44d587a2
  • ImageMagick-c++-6.9.10.68-7.0.11.el7_9.tuxcare.els6.x86_64.rpm
    sha:ee0e20dca4c4c2884e774066f906ec4a51577cd2da7dfb894fc32b38b799ab37
  • ImageMagick-c++-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els6.i686.rpm
    sha:d1d5398ced9cb404175685fe8eaf6e5bbadf135fd953f5b533156bcd296c4999
  • ImageMagick-c++-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els6.x86_64.rpm
    sha:5f611dab76dc994a9754860e3af698f8e6b7a4a664d4670ba4dc2da99a9fe5fa
  • ImageMagick-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els6.i686.rpm
    sha:f6bc5dde2bd6171d37b8ca6cd18e0524dce7920bb43cabb815a98a7f4be99dd7
  • ImageMagick-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els6.x86_64.rpm
    sha:c939796f2cf724b61892fd25bc0ef8fcf74b34cc31b3806a6f386447b8237a17
  • ImageMagick-doc-6.9.10.68-7.0.11.el7_9.tuxcare.els6.i686.rpm
    sha:02f6ba3fede3727294d92397d7387d3f47ed29f84930cb85334498891b0a7b7d
  • ImageMagick-doc-6.9.10.68-7.0.11.el7_9.tuxcare.els6.x86_64.rpm
    sha:4fd9f85aa739b9124750a312d8506f6cc3b6935973f74227ccff62c7e935d54f
  • ImageMagick-perl-6.9.10.68-7.0.11.el7_9.tuxcare.els6.i686.rpm
    sha:929c77e0a1560965f7fed67b128c614aaebfb271acd75c9008dc5086346ef386
  • ImageMagick-perl-6.9.10.68-7.0.11.el7_9.tuxcare.els6.x86_64.rpm
    sha:87722e7c122ff56981da002110f33bec908cfacc9ef8fc1c4a79375b6926ea85
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.