[CLSA-2026:1792547456] ImageMagick: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-21 02:47:12 UTC
Description:
- CVE-2026-109259: fix uninitialized memory read in the TGA decoder - CVE-2026-106578: fix invalid memory free in the MVG decoder on undersized primitive extent
CVEs fixed:
Updated packages:
  • ImageMagick-6.9.10.68-7.0.11.el7_9.tuxcare.els6.i686.rpm
    sha:6dc414cda42dfb6ea8e3df5f826dcd60aacfe5ee6da0f9a51eb7531538563111
  • ImageMagick-6.9.10.68-7.0.11.el7_9.tuxcare.els6.x86_64.rpm
    sha:71ac405f9c27be274d18009cc3ea25fdd676ba4c88591a2be755e731a82f43d7
  • ImageMagick-c++-6.9.10.68-7.0.11.el7_9.tuxcare.els6.i686.rpm
    sha:cfb623c8a2466a50becead8640b31e8d9316db25f6594cd2be6be76d7f354d8c
  • ImageMagick-c++-6.9.10.68-7.0.11.el7_9.tuxcare.els6.x86_64.rpm
    sha:b9f304629308c90ce39dd84f29fe5de1ef8bf2b566dd443f976aab07fa93184f
  • ImageMagick-c++-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els6.i686.rpm
    sha:81ca5c1c07f794af03dcade150b874b2fc375ddcbaca8db7a7454274dec3a54f
  • ImageMagick-c++-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els6.x86_64.rpm
    sha:200df71a2f6e8092c8d77278804454a0dd149eedb9114022f1a3c455dc7c748e
  • ImageMagick-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els6.i686.rpm
    sha:3dbefb65dc1508de7db2dcef9ec67b61181905c734265499ce89341f150e9c9a
  • ImageMagick-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els6.x86_64.rpm
    sha:35eb5c434964cd308f0654e72a31df8c64a0f7ae46016d79ae08c7e502360f03
  • ImageMagick-doc-6.9.10.68-7.0.11.el7_9.tuxcare.els6.i686.rpm
    sha:952b995ddaa7ad5a5556fefebf82038b50f989c28e8f5cdf9cc44a8001a2baf5
  • ImageMagick-doc-6.9.10.68-7.0.11.el7_9.tuxcare.els6.x86_64.rpm
    sha:4ed4628031f02a33cf7702a6d62b9fc7c0cdef49da4e4fc8ea05b830c5afa192
  • ImageMagick-perl-6.9.10.68-7.0.11.el7_9.tuxcare.els6.i686.rpm
    sha:5fa3f346d4e2785e9b6af3548d3d9ebddaa3b357bf5f2a57b5c6ab3b2483fd83
  • ImageMagick-perl-6.9.10.68-7.0.11.el7_9.tuxcare.els6.x86_64.rpm
    sha:fd02a91b81ccfab5a69cab7ebce26442a2f77c085eacfc416a2d19f65490a90b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.