[CLSA-2026:1781606406] Fix CVE(s): CVE-2026-45358, CVE-2026-49218, CVE-2026-53463
Type:
security
Severity:
Important
Release date:
2026-06-16 10:40:25 UTC
Description:
* SECURITY UPDATE: off-by-one out-of-bounds read in the meta (8BIM/IPTC) decoder - debian/patches/CVE-2026-45358.patch: bound tag_length against the remaining extent in GetIPTCStream in coders/meta.c - CVE-2026-45358 * SECURITY UPDATE: missing dimension check in the DCM decoder - debian/patches/CVE-2026-49218.patch: reject images decoded with zero rows or columns in coders/dcm.c - CVE-2026-49218 * SECURITY UPDATE: NULL pointer dereference in the distort operation - debian/patches/CVE-2026-53463.patch: require at least one argument before reading arguments[0] in GenerateCoefficients in magick/distort.c - CVE-2026-53463
CVEs fixed:
Updated packages:
  • imagemagick_6.8.9.9-7ubuntu5.17+tuxcare.els48_amd64.deb
    sha:ae625e54de2f578f1478b253c79af0b034347bd4
  • imagemagick-6.q16_6.8.9.9-7ubuntu5.17+tuxcare.els48_amd64.deb
    sha:9955831e34319e6caad508007538f003e326c2d7
  • imagemagick-common_6.8.9.9-7ubuntu5.17+tuxcare.els48_all.deb
    sha:f7ae45348ffe59d083775f993827c340952fb0cd
  • imagemagick-doc_6.8.9.9-7ubuntu5.17+tuxcare.els48_all.deb
    sha:7b73fc8c5a5b95a340ed121d750fa8729b543841
  • libimage-magick-perl_6.8.9.9-7ubuntu5.17+tuxcare.els48_all.deb
    sha:0e91a2b8dee13b5c7619e7cc67323d5add99c4f3
  • libimage-magick-q16-perl_6.8.9.9-7ubuntu5.17+tuxcare.els48_amd64.deb
    sha:1c7a489cdd2c5f7f8062497b5c89fa5bd0c9e2cd
  • libmagick++-6-headers_6.8.9.9-7ubuntu5.17+tuxcare.els48_all.deb
    sha:e08de4fb073c219d27ade9fdca351acd41f11b99
  • libmagick++-6.q16-5v5_6.8.9.9-7ubuntu5.17+tuxcare.els48_amd64.deb
    sha:1bd033ad3ffa99ea41a2c3744e9d23602c141043
  • libmagick++-6.q16-dev_6.8.9.9-7ubuntu5.17+tuxcare.els48_amd64.deb
    sha:3624e46f7db006d91d42d26c24ddf537f2a38872
  • libmagick++-dev_6.8.9.9-7ubuntu5.17+tuxcare.els48_all.deb
    sha:48cc0c32eb0768e3da2cbb0bc727803899ac3a93
  • libmagickcore-6-arch-config_6.8.9.9-7ubuntu5.17+tuxcare.els48_amd64.deb
    sha:edbd66e7527da2467c4e0ce84d08c27deb4a0d53
  • libmagickcore-6-headers_6.8.9.9-7ubuntu5.17+tuxcare.els48_all.deb
    sha:71836ed5bdc120e987e8f4b848c5f6c0820fbb48
  • libmagickcore-6.q16-2_6.8.9.9-7ubuntu5.17+tuxcare.els48_amd64.deb
    sha:935b5683fbc57613b67a992f6a23736383fce950
  • libmagickcore-6.q16-2-extra_6.8.9.9-7ubuntu5.17+tuxcare.els48_amd64.deb
    sha:974ee7fb6ca7a04d28d8d9e1a820a8284d4f0ede
  • libmagickcore-6.q16-dev_6.8.9.9-7ubuntu5.17+tuxcare.els48_amd64.deb
    sha:5e9619431f97536823a6e5023ef4334465a14afc
  • libmagickcore-dev_6.8.9.9-7ubuntu5.17+tuxcare.els48_all.deb
    sha:9de8b19f42cbccdeb4551b5d88a20cb9d17031f6
  • libmagickwand-6-headers_6.8.9.9-7ubuntu5.17+tuxcare.els48_all.deb
    sha:685a3a57ffa34d4d6f12b9970e1efdc821777df5
  • libmagickwand-6.q16-2_6.8.9.9-7ubuntu5.17+tuxcare.els48_amd64.deb
    sha:5d715a0cb47fbd41270c2d343e6c894cebefd012
  • libmagickwand-6.q16-dev_6.8.9.9-7ubuntu5.17+tuxcare.els48_amd64.deb
    sha:7f2ef07c4b5a659078b677085ab57d101799398c
  • libmagickwand-dev_6.8.9.9-7ubuntu5.17+tuxcare.els48_all.deb
    sha:70f9d286881ccd06d2b37d64158cb13b83d55bfe
  • perlmagick_6.8.9.9-7ubuntu5.17+tuxcare.els48_all.deb
    sha:c1d15c1856507973e974631c1e0dd9c630709a06
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.