[CLSA-2026:1782314022] Fix CVE(s): CVE-2026-46559, CVE-2026-46692, CVE-2026-46693, CVE-2026-47166
Type:
security
Severity:
Critical
Release date:
2026-06-24 15:14:03 UTC
Description:
* SECURITY UPDATE: heap over-write, file-descriptor hijack race, and heap over-read in the distributed pixel cache server - debian/patches/CVE-2026-46692-46693-47166.patch: bound the requested region against the pixel cache extent before reading or writing pixels and indexes, and hand each connection a private heap-allocated socket to a detached handler thread in magick/distribute-cache.c - CVE-2026-46692 - CVE-2026-46693 - CVE-2026-47166 * SECURITY UPDATE: heap buffer over-write of a single byte in the JP2 encoder via crafted jp2:quality / jp2:rate options - debian/patches/CVE-2026-46559.patch: bound the jp2:quality and jp2:rate parse loops by the tcp_distoratio/tcp_rates array extent in WriteJP2Image() in coders/jp2.c (defense-in-depth; the JP2 coder is not compiled in this build) - CVE-2026-46559
CVEs fixed:
Updated packages:
  • imagemagick_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_amd64.deb
    sha:9068d1aa2ed4e676b57bf73866ad0850484b2c60
  • imagemagick-6-common_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_all.deb
    sha:6f557d970b14755e6ce084e94813ca71efb3cdd4
  • imagemagick-6-doc_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_all.deb
    sha:017cb2b2654a932f4e52340ccb5a0b6551f04baa
  • imagemagick-6.q16_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_amd64.deb
    sha:ce5b0d943cb9027a1e749f3170915c3c9001378a
  • imagemagick-6.q16hdri_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_amd64.deb
    sha:c94d7b687675f86d0fe6b5cddf3419a4efa8c082
  • imagemagick-common_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_all.deb
    sha:2d9f5741ab59cf4f70edf4ba4ed813a8369bc9f5
  • imagemagick-doc_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_all.deb
    sha:0c9d4df588ab46f149925807fc108a40fc577978
  • libimage-magick-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_all.deb
    sha:e048cfdcd2a2af72e6224834d663fb1f18fd813c
  • libimage-magick-q16-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_amd64.deb
    sha:48a6ef72adcb8aff33d08f857009573881de5441
  • libimage-magick-q16hdri-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_amd64.deb
    sha:71891ce302731304fa77cde17be16ffa326ee900
  • libmagick++-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_all.deb
    sha:2f64601c61ff3c29527c854076e737ad39d05188
  • libmagick++-6.q16-7_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_amd64.deb
    sha:04a6754ac91d48ebc6b33f7b48aeb7f2ccea7c22
  • libmagick++-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_amd64.deb
    sha:4deb3c4281870c8ec84e5cf3ec2a365a682488aa
  • libmagick++-6.q16hdri-7_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_amd64.deb
    sha:789192072f4881ea98a8e99e46537eb024dd726c
  • libmagick++-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_amd64.deb
    sha:d58513c94f00b10cd0a4fd7fa092d183141ab545
  • libmagick++-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_all.deb
    sha:ac6c60b8f30dff3c327a7f8b85a5f2ca0228e2e8
  • libmagickcore-6-arch-config_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_amd64.deb
    sha:a9c5c9352d90d167774380c341d3f731d643ddce
  • libmagickcore-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_all.deb
    sha:68a792e50d7bdc964b374da0c0d56a26fa27a58b
  • libmagickcore-6.q16-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_amd64.deb
    sha:16cd18f8b16b45a81c886e0118c070b66125be3f
  • libmagickcore-6.q16-3-extra_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_amd64.deb
    sha:73b1a106ea6d2697e63af506ee7c509dd6873f25
  • libmagickcore-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_amd64.deb
    sha:928a7ed88fdc58c90d7d5715c2a3626dd63155b1
  • libmagickcore-6.q16hdri-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_amd64.deb
    sha:09c1f8bf98b0b04a78ee7b54f44054ee1494a1c6
  • libmagickcore-6.q16hdri-3-extra_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_amd64.deb
    sha:2504342c0dc7c57dab56efff21213d493433a27f
  • libmagickcore-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_amd64.deb
    sha:0bd779c6260a554f9b297be9c345dbe1031cf17b
  • libmagickcore-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_all.deb
    sha:116a26560eceff46207295fa11545213e6367a5e
  • libmagickwand-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_all.deb
    sha:087513093e6ce0b4d3f34304f6a5353ad3f69073
  • libmagickwand-6.q16-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_amd64.deb
    sha:3dbf3152702befba12d0b1dac0b5dc146d3d841c
  • libmagickwand-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_amd64.deb
    sha:5c1ee91f6e8af69d1f132c9380daa91b60690aae
  • libmagickwand-6.q16hdri-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_amd64.deb
    sha:cceaad5da6fb4ca521ffce697debec07f9dc321a
  • libmagickwand-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_amd64.deb
    sha:5156bcdb2366bb7ccad9d7925a12d62138496b36
  • libmagickwand-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_all.deb
    sha:61f2b0f2f851d6fcefed0af064b315fae87ab5ad
  • perlmagick_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els38_all.deb
    sha:6cc456dc551c42b334ab33139a68779383627a49
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.