[CLSA-2026:1782720378] Fix CVE(s): CVE-2026-46559, CVE-2026-46692, CVE-2026-46693, CVE-2026-47166

Type:

security

Severity:

Critical

Release date:

2026-06-29 08:06:37 UTC

Description:

   * SECURITY UPDATE: heap over-write, file-descriptor hijack race, and heap
     over-read in the distributed pixel cache server
     - debian/patches/CVE-2026-46692-46693-47166.patch: bound the requested
       region against the pixel cache extent before reading or writing pixels
       and indexes, and hand each connection a private heap-allocated socket to
       a detached handler thread in magick/distribute-cache.c
     - CVE-2026-46692
     - CVE-2026-46693
     - CVE-2026-47166
   * SECURITY UPDATE: heap buffer over-write of a single byte in the JP2
     encoder via crafted jp2:quality / jp2:rate options
     - debian/patches/CVE-2026-46559.patch: bound the jp2:quality and jp2:rate
       parse loops by the tcp_distoratio/tcp_rates array extent in
       WriteJP2Image() in coders/jp2.c (defense-in-depth; the JP2 coder is not
       compiled in this build)
     - CVE-2026-46559

CVEs fixed:

Updated packages:

imagemagick_6.8.9.9-7ubuntu5.17+tuxcare.els49_amd64.deb
sha:b56df409001e975086c123a5b4ecdac16d8625f8
imagemagick-6.q16_6.8.9.9-7ubuntu5.17+tuxcare.els49_amd64.deb
sha:197b730cf7fb7875918e7d7f257913fd48518ea1
imagemagick-common_6.8.9.9-7ubuntu5.17+tuxcare.els49_all.deb
sha:a457db34aac2f47c6a3f070bf701ed4830a6ce78
imagemagick-doc_6.8.9.9-7ubuntu5.17+tuxcare.els49_all.deb
sha:e31e5dcac4af3804af1228dd46bb0d42f7dbcfb6
libimage-magick-perl_6.8.9.9-7ubuntu5.17+tuxcare.els49_all.deb
sha:e79d72311ac4833f3f20ebd5b2e47c4875f8102c
libimage-magick-q16-perl_6.8.9.9-7ubuntu5.17+tuxcare.els49_amd64.deb
sha:327f6755819e3e017a57375ca79e31507ec56028
libmagick++-6-headers_6.8.9.9-7ubuntu5.17+tuxcare.els49_all.deb
sha:cae241dc7f28d7396a8bbe38619a1b8c13e06c36
libmagick++-6.q16-5v5_6.8.9.9-7ubuntu5.17+tuxcare.els49_amd64.deb
sha:b8410527bf7454de2fc1ebf00593796718fdfad0
libmagick++-6.q16-dev_6.8.9.9-7ubuntu5.17+tuxcare.els49_amd64.deb
sha:c50b4d00a83cac8eb0dfbf917db07489439bcfa9
libmagick++-dev_6.8.9.9-7ubuntu5.17+tuxcare.els49_all.deb
sha:493061b143e92e340f23edd4677cbfede3ed22df
libmagickcore-6-arch-config_6.8.9.9-7ubuntu5.17+tuxcare.els49_amd64.deb
sha:e0a287f99a84906ddf83310bb4ba06b12741e08b
libmagickcore-6-headers_6.8.9.9-7ubuntu5.17+tuxcare.els49_all.deb
sha:d3af419347ed8145518ea1a519430dd9022df4f9
libmagickcore-6.q16-2_6.8.9.9-7ubuntu5.17+tuxcare.els49_amd64.deb
sha:615c77a1f0cd3008380e2567769e4c8a05ffb079
libmagickcore-6.q16-2-extra_6.8.9.9-7ubuntu5.17+tuxcare.els49_amd64.deb
sha:f949bcd6942251a4aa57b4ca40e566519b96ca1e
libmagickcore-6.q16-dev_6.8.9.9-7ubuntu5.17+tuxcare.els49_amd64.deb
sha:020eb0378ff9f2e8134c14f59029204225dfa17d
libmagickcore-dev_6.8.9.9-7ubuntu5.17+tuxcare.els49_all.deb
sha:77dace7564a4095aac04e7c6031bbc877e9748c9
libmagickwand-6-headers_6.8.9.9-7ubuntu5.17+tuxcare.els49_all.deb
sha:4ad1edd74bd1b7d65675e927235455a1638b7481
libmagickwand-6.q16-2_6.8.9.9-7ubuntu5.17+tuxcare.els49_amd64.deb
sha:3de309e4528dfac9b26ea31ed6afba47f6d54042
libmagickwand-6.q16-dev_6.8.9.9-7ubuntu5.17+tuxcare.els49_amd64.deb
sha:24457886ca51ec4031a54b429685329d5bb17b53
libmagickwand-dev_6.8.9.9-7ubuntu5.17+tuxcare.els49_all.deb
sha:1f5d5f06b28a600f90b5bfe712d02a88b9b7eb20
perlmagick_6.8.9.9-7ubuntu5.17+tuxcare.els49_all.deb
sha:fdf7514a144be530cea060572deb43df9e340f5c

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.