[CLSA-2026:1789650963] ImageMagick: Fix of CVE-2026-86420
Type:
security
Severity:
Important
Release date:
2026-09-19 00:51:52 UTC
Description:
- CVE-2026-86420: release the memory-resource budget in OpenPixelCache() (magick/cache.c) when the pixel allocation fails and the cache falls back to the source pixels, so repeated allocation failures cannot exhaust the process memory budget
CVEs fixed:
Updated packages:
  • ImageMagick-6.9.10.68-7.0.11.el7_9.tuxcare.els3.i686.rpm
    sha:6db2e0ee94306d0227a2b35d7ffce7d50225f52d5cf402a522a0100ddd7b8374
  • ImageMagick-6.9.10.68-7.0.11.el7_9.tuxcare.els3.x86_64.rpm
    sha:66cf6c973c894d81f643fb41897cbd29b0e0f87ec0b7ddae2d01ccca1a18ff07
  • ImageMagick-c++-6.9.10.68-7.0.11.el7_9.tuxcare.els3.i686.rpm
    sha:12413eda6e8e46f00238ea0ac9ae6d3d5bb91b3f75f9a49f3bb368d29ea40e22
  • ImageMagick-c++-6.9.10.68-7.0.11.el7_9.tuxcare.els3.x86_64.rpm
    sha:639be8ea70f035e7803fdc531d68ccec26905c629a6161c703d9e95f57395b12
  • ImageMagick-c++-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els3.i686.rpm
    sha:3624bfb6ecbe07a6020174eb988b8b5f09fad7dccef20d915824dcfde6a79a8c
  • ImageMagick-c++-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els3.x86_64.rpm
    sha:be6fde1d380d0d78ac8dbeb4896884e0cd2b401bb83ca664dca29cc705ed1bd8
  • ImageMagick-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els3.i686.rpm
    sha:68b94d24a1b5403d5500df5aeded26a143fba8ba6ef458f81967a1cd3be4dc1d
  • ImageMagick-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els3.x86_64.rpm
    sha:c9f7fb88e9374ef52711afde29817c6cb7c29d6c370c4b319718dc822a19623e
  • ImageMagick-doc-6.9.10.68-7.0.11.el7_9.tuxcare.els3.x86_64.rpm
    sha:2d283bf9cfe907efa5aee5a047f685fbcdbeb2c9a5e6a083302688c865f8fb97
  • ImageMagick-perl-6.9.10.68-7.0.11.el7_9.tuxcare.els3.x86_64.rpm
    sha:031c2a139afa269605ac187b0f6755042165c87267f276973b9bb99c14ba5c29
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.