[CLSA-2026:1783341335] Fix CVE(s): CVE-2026-33901, CVE-2026-33908
Type:
security
Severity:
Important
Release date:
2026-07-06 12:35:53 UTC
Description:
* SECURITY UPDATE: heap buffer overflow in the MVG decoder when parsing crafted push clip-path/gradient/pattern blocks - debian/patches/CVE-2026-33901.patch: heap buffer overflow in the MVG decoder when parsing crafted push clip-path/gradient/pattern blocks - CVE-2026-33901 * SECURITY UPDATE: stack exhaustion (DoS) via unbounded recursion in DestroyXMLTree when freeing deeply nested XML - debian/patches/CVE-2026-33908.patch: stack exhaustion (DoS) via unbounded recursion in DestroyXMLTree when freeing deeply nested XML - CVE-2026-33908
CVEs fixed:
Updated packages:
  • imagemagick_6.8.9.9-7ubuntu5.17+tuxcare.els50_amd64.deb
    sha:42bcf34b8ba7f16e1f2535f4337586e6bfe5a827
  • imagemagick-6.q16_6.8.9.9-7ubuntu5.17+tuxcare.els50_amd64.deb
    sha:a0bdeb59bc0c8c125cd705ebb8b06703c24e094c
  • imagemagick-common_6.8.9.9-7ubuntu5.17+tuxcare.els50_all.deb
    sha:d8f7dd502ba5403de543e387de8464759bf29369
  • imagemagick-doc_6.8.9.9-7ubuntu5.17+tuxcare.els50_all.deb
    sha:4de004bdbce0c5546bf401563b88f62e641b5330
  • libimage-magick-perl_6.8.9.9-7ubuntu5.17+tuxcare.els50_all.deb
    sha:70fc2051c96b1c88953c183b037d86a7c3939cd0
  • libimage-magick-q16-perl_6.8.9.9-7ubuntu5.17+tuxcare.els50_amd64.deb
    sha:a8e974bf5af17fc986e4327772aadcd2e0c99b3a
  • libmagick++-6-headers_6.8.9.9-7ubuntu5.17+tuxcare.els50_all.deb
    sha:28fc9e81ea0a24a2c3f52331e954564a8a828f8c
  • libmagick++-6.q16-5v5_6.8.9.9-7ubuntu5.17+tuxcare.els50_amd64.deb
    sha:31e3ba30845537c939e0cda747b22184ac758d18
  • libmagick++-6.q16-dev_6.8.9.9-7ubuntu5.17+tuxcare.els50_amd64.deb
    sha:aafaed8a7e1d48d6268dae8088b415c1ea5fd40d
  • libmagick++-dev_6.8.9.9-7ubuntu5.17+tuxcare.els50_all.deb
    sha:e720ae8c2824a3ddcd0f886c9a7574a187304469
  • libmagickcore-6-arch-config_6.8.9.9-7ubuntu5.17+tuxcare.els50_amd64.deb
    sha:47195313a3321ee181f8ee018492e60c01b25e83
  • libmagickcore-6-headers_6.8.9.9-7ubuntu5.17+tuxcare.els50_all.deb
    sha:5d6145b15fc09a744ffd5c7804f3b7e0bacd3d57
  • libmagickcore-6.q16-2_6.8.9.9-7ubuntu5.17+tuxcare.els50_amd64.deb
    sha:c3511aae6480a805274e3375b999239e28fc0710
  • libmagickcore-6.q16-2-extra_6.8.9.9-7ubuntu5.17+tuxcare.els50_amd64.deb
    sha:598dde1b4312488311d24e3924e50280c4f0ebdc
  • libmagickcore-6.q16-dev_6.8.9.9-7ubuntu5.17+tuxcare.els50_amd64.deb
    sha:7cae6bdf901bb7b06357bc79adf0e63050164d21
  • libmagickcore-dev_6.8.9.9-7ubuntu5.17+tuxcare.els50_all.deb
    sha:af51c097290db584b7d163b628f36b476d898997
  • libmagickwand-6-headers_6.8.9.9-7ubuntu5.17+tuxcare.els50_all.deb
    sha:573ddf129c3fb54396f149def1747086ef513524
  • libmagickwand-6.q16-2_6.8.9.9-7ubuntu5.17+tuxcare.els50_amd64.deb
    sha:224617698c5d5f04dc72c98138963edd66598614
  • libmagickwand-6.q16-dev_6.8.9.9-7ubuntu5.17+tuxcare.els50_amd64.deb
    sha:aafa109b34805a110f9fd7899656d057149d2d11
  • libmagickwand-dev_6.8.9.9-7ubuntu5.17+tuxcare.els50_all.deb
    sha:0e4c4d8f9762a9579f19a81e7a52ed9838adac3d
  • perlmagick_6.8.9.9-7ubuntu5.17+tuxcare.els50_all.deb
    sha:59cb6b3641298954f8dbadf0c111e66695526e2f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.