Release date:
2026-10-15 14:00:34 UTC
Description:
- CVE-2026-106571: check the pixel cache nexus size calculation for overflow
- CVE-2026-106573: limit macro expansion in the MVG renderer
- CVE-2026-106578: fix an invalid free in the MVG decoder by correcting the
CheckPrimitiveExtent() call
- CVE-2026-106579: check the coder name against the security policy so a crafted
image cannot bypass a coder-domain policy
- CVE-2026-106577: escape and trim labels written by the PS, PS2, PS3 and PDF
coders to prevent PostScript code injection
Updated packages:
-
ImageMagick-6.9.13.52-2.el8.tuxcare.els4.x86_64.rpm
sha:d9fb2210b83c23eed040c11e6ee55bbbcdebb453b1c246ffa1ab142b7c9cd445
-
ImageMagick-c++-6.9.13.52-2.el8.tuxcare.els4.x86_64.rpm
sha:770b857d79941f51aba122916fcec7914b0e96db49b2363e5c27bc1c59ce8648
-
ImageMagick-c++-devel-6.9.13.52-2.el8.tuxcare.els4.x86_64.rpm
sha:393442fc77279ab67913726239a07c4013b46b21a831272a1ee78bcecff2ddff
-
ImageMagick-devel-6.9.13.52-2.el8.tuxcare.els4.x86_64.rpm
sha:53417af45538d9be6e39ff1f4f64cca001849c712ac69522db6ff5b6198ce2a5
-
ImageMagick-djvu-6.9.13.52-2.el8.tuxcare.els4.x86_64.rpm
sha:4198333c74c480982e6a29648746c486a1d12ff29d27076ef84777384e1d614a
-
ImageMagick-doc-6.9.13.52-2.el8.tuxcare.els4.x86_64.rpm
sha:2b09e474a160baf19e0a41a194eaf6ad2b3572d5a82e5b4f31d1900f6630342e
-
ImageMagick-libs-6.9.13.52-2.el8.tuxcare.els4.x86_64.rpm
sha:5ab815d4ca763362df3cc696f90a32f095e246f200ff2e5171c9973ca995bdc8
-
ImageMagick-perl-6.9.13.52-2.el8.tuxcare.els4.x86_64.rpm
sha:cab400f4d4365bf875f3b50d544e76c58dd3ee1000e01204297e185055fcc00e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
