[CLSA-2026:1782139676] Fix CVE(s): CVE-2026-46559, CVE-2026-49218, CVE-2026-53460
Type:
security
Severity:
Important
Release date:
2026-06-22 14:48:15 UTC
Description:
* SECURITY UPDATE: Heap buffer over-write in the JP2 encoder via jp2:quality and jp2:rate options - debian/patches/CVE-2026-46559.patch: bound the jp2:quality and jp2:rate parse loops by the tcp_distoratio/tcp_rates array extent in WriteJP2Image() in coders/jp2.c - CVE-2026-46559 * SECURITY UPDATE: Invalid image dimensions in the DCM decoder leading to crashes in later operations - debian/patches/CVE-2026-49218.patch: reject an image with zero rows or columns at the end of ReadDCMImage() in coders/dcm.c - CVE-2026-49218 * SECURITY UPDATE: Out-of-memory condition via missing maximum memory request check in AcquireAlignedMemory - debian/patches/CVE-2026-53460.patch: reject allocation sizes greater than GetMaxMemoryRequest() in AcquireAlignedMemory() in magick/memory.c - CVE-2026-53460
CVEs fixed:
Updated packages:
  • imagemagick_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_amd64.deb
    sha:24af8a0235c3b67c140e4907364de8f725a22ce9
  • imagemagick-6-common_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_all.deb
    sha:3d156b3d98fe75da3325a80445549991e87bf1b7
  • imagemagick-6-doc_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_all.deb
    sha:2c99f0c991a4cd371535a648afb25ebb16bb8481
  • imagemagick-6.q16_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_amd64.deb
    sha:27a7da6eecb3354d79c0887dbc6d584048934723
  • imagemagick-6.q16hdri_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_amd64.deb
    sha:0bf88374c97621425be00b4333cee68c11fe1450
  • imagemagick-common_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_all.deb
    sha:23d4fab37560ced78b1ff9d2ef174e35b37bafd4
  • imagemagick-doc_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_all.deb
    sha:cbe04c49cd59d89c0c07db53abb536a539915657
  • libimage-magick-perl_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_all.deb
    sha:5908077d929d99694aa936c16135d490812daa91
  • libimage-magick-q16-perl_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_amd64.deb
    sha:8c5b4eb97fb43b5aff571d4d1aa4d36c799def87
  • libimage-magick-q16hdri-perl_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_amd64.deb
    sha:34478600eff4855b8f6a42d35bfbc368875912eb
  • libmagick++-6-headers_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_all.deb
    sha:d8e0d499832857d76cf6e37e6506124f15bbbf7e
  • libmagick++-6.q16-8_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_amd64.deb
    sha:2f1f595258e264bf3f21e2fbe77ce7ee2f889c61
  • libmagick++-6.q16-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_amd64.deb
    sha:e1e8de27be411d972ea4cbed05c108e2209f3ce5
  • libmagick++-6.q16hdri-8_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_amd64.deb
    sha:9b7aac957c8c4cd289f17ab27812666c9377205e
  • libmagick++-6.q16hdri-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_amd64.deb
    sha:654c03949e991e18b878eab08ab4114948aded0e
  • libmagick++-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_all.deb
    sha:f88ccb93ecf4533ebb7530fbd3f480951bb911dc
  • libmagickcore-6-arch-config_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_amd64.deb
    sha:5c4c0eed978b5ebccc89e11cb330ee130fbdb5fa
  • libmagickcore-6-headers_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_all.deb
    sha:3a4e6c9a0d166d960792ddbf7c74288b4d10b7de
  • libmagickcore-6.q16-6_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_amd64.deb
    sha:7e87099c8b83f834ec970f06758fe8ae4edcb196
  • libmagickcore-6.q16-6-extra_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_amd64.deb
    sha:a568729032513d64369d1a69c1fddb2af7184d06
  • libmagickcore-6.q16-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_amd64.deb
    sha:f5afe7fc7cd17aff93286411dce8a1890810ba6f
  • libmagickcore-6.q16hdri-6_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_amd64.deb
    sha:6f700fd192a1d2ba9ca8f268ed2fe861a2495016
  • libmagickcore-6.q16hdri-6-extra_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_amd64.deb
    sha:26f353b9b5a42073cfcd67cfd4206116e2826efa
  • libmagickcore-6.q16hdri-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_amd64.deb
    sha:d6797f5b0ed434b04f238304d6aa07cb82c5e3b4
  • libmagickcore-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_all.deb
    sha:f61fad54054ccf88e5d32a2f4d5e2b3231dc2f88
  • libmagickwand-6-headers_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_all.deb
    sha:9a59574a28d96ae296967a15ffebc575509142e7
  • libmagickwand-6.q16-6_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_amd64.deb
    sha:ad5b144cae55f4e8bd88bd8aceb38a405a175f31
  • libmagickwand-6.q16-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_amd64.deb
    sha:4d98877992d1d53e4880971b512ee58098c0dc83
  • libmagickwand-6.q16hdri-6_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_amd64.deb
    sha:872325c4f5f9256442bcac13b8429c03a0cd0534
  • libmagickwand-6.q16hdri-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_amd64.deb
    sha:7371784e9f7aafb848af3baaba7f09a722c957a8
  • libmagickwand-dev_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_all.deb
    sha:b46bc1922ca3bb5c5bc1b17e5427b3166932f4d1
  • perlmagick_6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29_all.deb
    sha:9a5ab30dc9eee875eb853cfc1560c8033017aea6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.