Release date:
2026-10-13 15:24:07 UTC
Description:
- CVE-2026-106571: check the pixel cache nexus size calculation for overflow
- CVE-2026-106573: limit macro expansion in the MVG renderer
- CVE-2026-106578: fix an invalid free in the MVG decoder by correcting the
CheckPrimitiveExtent() call
- CVE-2026-106579: check the coder name against the security policy so a crafted
image cannot bypass a coder-domain policy
- CVE-2026-106577: escape and trim labels written by the PS, PS2, PS3 and PDF
coders to prevent PostScript code injection
Updated packages:
-
ImageMagick-6.9.13.52-2.el8.tuxcare.els4.x86_64.rpm
sha:2c04db98297ec05af1d9215b97968e52ce041fedc77e50bd12d28dc334617cec
-
ImageMagick-c++-6.9.13.52-2.el8.tuxcare.els4.x86_64.rpm
sha:73ed5d38a780e36264609bc5d8ac6a1a1d6a825d7d595b3a204321ac4daf312f
-
ImageMagick-c++-devel-6.9.13.52-2.el8.tuxcare.els4.x86_64.rpm
sha:db7f19f2002a8d4e4e03b74606067a46ddc5ee8d9598b641769d0ebf5cab088e
-
ImageMagick-devel-6.9.13.52-2.el8.tuxcare.els4.x86_64.rpm
sha:d656272e24f872c9d23b4db25da7ba8fb2fd17308a177b08de210baa52973a90
-
ImageMagick-djvu-6.9.13.52-2.el8.tuxcare.els4.x86_64.rpm
sha:104019eb526b15f68c4c0909194c43af1191f476a36fe1e2415fc546c2dae584
-
ImageMagick-doc-6.9.13.52-2.el8.tuxcare.els4.x86_64.rpm
sha:59b2d33cbcf22e452ca81d20e3c67be0677db1ae2f97ad37c5818a29d9b85088
-
ImageMagick-libs-6.9.13.52-2.el8.tuxcare.els4.x86_64.rpm
sha:4d3a1d135a9535518f5b588dac303f9a5bdc5a5e591f5863d6565344fd94c622
-
ImageMagick-perl-6.9.13.52-2.el8.tuxcare.els4.x86_64.rpm
sha:535938697bfdf930683042149270de1812583094eadeec118e99a5038d91b95c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
