[CLSA-2026:1789399498] ImageMagick: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-15 14:46:44 UTC
Description:
- CVE-2026-86421: destroy the per-level draw_info clone when popping a in MSLEndElement() (coders/msl.c) to fix a memory leak - CVE-2026-86423: track already-seen images in a seen[] array in GetList() (PerlMagick) so a non-adjacent repeat is cloned, fixing a use-after-free
Updated packages:
  • ImageMagick-6.9.10.68-7.0.11.el7_9.tuxcare.els2.i686.rpm
    sha:5bf5fdadc23dcb626739842cb310587caf103b6ec24d38263265ceab59925b58
  • ImageMagick-6.9.10.68-7.0.11.el7_9.tuxcare.els2.x86_64.rpm
    sha:30968b0e10b7b1449de74b5b791235092d2fe6f2e71deff1ce2c67d70773fa5c
  • ImageMagick-c++-6.9.10.68-7.0.11.el7_9.tuxcare.els2.i686.rpm
    sha:5a655e0b69537ff8dbfd0167bb24ee6dcbd61faf72b05f49d5e5b766076c53f2
  • ImageMagick-c++-6.9.10.68-7.0.11.el7_9.tuxcare.els2.x86_64.rpm
    sha:2e755fb49be954ae0fcb50ce551b010c2c396809006ec0e2c8d584d91c704aa2
  • ImageMagick-c++-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els2.i686.rpm
    sha:838d52e5fcba9db3aca847bdc54992ee2957f2f3f0a2b1da8004802c0690391b
  • ImageMagick-c++-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els2.x86_64.rpm
    sha:85da61f6eb5e8b590befd518ea88e4ffc3907c186a9de7ca82abbc0cc42f61f4
  • ImageMagick-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els2.i686.rpm
    sha:5fdc297e0a2e55cdcb1a9c936311b31cac30173e94790e22f6381ce7535fb4b4
  • ImageMagick-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els2.x86_64.rpm
    sha:84efcc489c58c69461157478306f9f91aa9387cfd123574c555dac4e2a505ddf
  • ImageMagick-doc-6.9.10.68-7.0.11.el7_9.tuxcare.els2.x86_64.rpm
    sha:531d55e235522fd821c96173ea6f2cdd59bfe6dbc2206205138d1df81ed216d3
  • ImageMagick-perl-6.9.10.68-7.0.11.el7_9.tuxcare.els2.x86_64.rpm
    sha:2b59f02610872a0936bd981dcedd8c0808381aef13133d4aba88afa5f5ac96b0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.