[CLSA-2026:1789551946] Fix CVE(s): CVE-2026-25985, CVE-2026-25989
Type:
security
Severity:
Important
Release date:
2026-09-16 09:45:56 UTC
Description:
* SECURITY UPDATE: denial of service in the MVG/SVG renderer when a bezier control-point coordinate delta is out of range - debian/patches/CVE-2026-25985.patch: reject an out-of-range coordinate delta before the (size_t) conversion, release points/coefficients on the error paths instead of raising a fatal exception, and refresh primitive_info after the CheckPrimitiveExtent() reallocation, in TraceBezier() in magick/draw.c - CVE-2026-25985 * SECURITY UPDATE: off-by-one boundary check in the double-to-integer cast helpers leading to an undefined conversion - debian/patches/CVE-2026-25989.patch: make the upper-bound guard of CastDoubleToUnsigned() and CastDoubleToLong() exclusive of the boundary value in magick/image-private.h - CVE-2026-25989
CVEs fixed:
Updated packages:
  • imagemagick_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_amd64.deb
    sha:5b69adb3f0a4836a8fc4c983071d881093931a8f
  • imagemagick-6-common_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_all.deb
    sha:9b8a44a900f6313354f9ad981dbebfb79fb5dfc2
  • imagemagick-6-doc_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_all.deb
    sha:acd84fa3b16096053c069bfc8d226a3503c2a20b
  • imagemagick-6.q16_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_amd64.deb
    sha:a881ba63d8cb981bd2e0dafa78b5313c5003d603
  • imagemagick-6.q16hdri_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_amd64.deb
    sha:0b882eadcc722a59f2cf0a4b57d8463466352f13
  • imagemagick-common_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_all.deb
    sha:172bd693161f9debfd8ac1b1b54ef2ba1a013a6c
  • imagemagick-doc_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_all.deb
    sha:5add7cb0889fa8ab61944e467aed00ab169cbd83
  • libimage-magick-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_all.deb
    sha:88d90786c8a8cbc9491dd43d8281cf50156425c5
  • libimage-magick-q16-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_amd64.deb
    sha:74781e5f6af04e2c2223ae2b9039f2f016e5d89c
  • libimage-magick-q16hdri-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_amd64.deb
    sha:58aa9bec44771319371a2ce233d780b85e73e932
  • libmagick++-6-headers_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_all.deb
    sha:af31bb534d872227789fed2c9fdf30cafccdb49b
  • libmagick++-6.q16-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_amd64.deb
    sha:fed7ccc9f7905928aea6bdb7174057bf42477e1f
  • libmagick++-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_amd64.deb
    sha:d70766f6284e2edd754e06b39f38ab29cda8ab7a
  • libmagick++-6.q16hdri-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_amd64.deb
    sha:feddd37474577c003609d37ee400193b7cca0354
  • libmagick++-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_amd64.deb
    sha:d6962741166cc80c4805ca5e0f3ed12652edda3c
  • libmagick++-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_all.deb
    sha:a5a4acc7ad228326ea56d7932be1d3b40bd3ed28
  • libmagickcore-6-arch-config_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_amd64.deb
    sha:d4f11b4c8bf176aa3037576e654dde92ee11fb1c
  • libmagickcore-6-headers_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_all.deb
    sha:eb142a2311b5d0341932604e3081978bcc1f4746
  • libmagickcore-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_amd64.deb
    sha:b65f6dfad4c28466fc0631351987f0c3c957ec01
  • libmagickcore-6.q16-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_amd64.deb
    sha:d9aae3766b14cf58bedbd3e10953ad6b439216ac
  • libmagickcore-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_amd64.deb
    sha:b5302cf9b15d35ebab801d009387e554d3187115
  • libmagickcore-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_amd64.deb
    sha:930e5d97d7ba31b3ee7e2231c96529b17953f922
  • libmagickcore-6.q16hdri-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_amd64.deb
    sha:ce9929287de8f961f7981413bded8a2fdb62796f
  • libmagickcore-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_amd64.deb
    sha:1cd06f50ea8a7650ef0dfea5993257f323e27edb
  • libmagickcore-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_all.deb
    sha:5d86c599d34b7c1c38004d10f527b93945edb646
  • libmagickwand-6-headers_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_all.deb
    sha:ac4c312417a86908c736c8f5b7c3c1840b03f095
  • libmagickwand-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_amd64.deb
    sha:6de5cb5827db81820ac52f14a2a4b6751dc0bfce
  • libmagickwand-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_amd64.deb
    sha:310b401f4668fcec6be32a4c397fbdb8862b3894
  • libmagickwand-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_amd64.deb
    sha:e3748d228d409a86cc04ba63d436245121839240
  • libmagickwand-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_amd64.deb
    sha:113716e4bc4e83cc59cb9a859241d71c9d69bf8f
  • libmagickwand-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_all.deb
    sha:49cc39f9c33797d0038f0cd2c8f0b039f8a7e9d1
  • perlmagick_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_all.deb
    sha:e64e5d8ba53c645ef39d543f2575aa578467501b
  • imagemagick_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_arm64.deb
    sha:bf0cc006f81a3325fad873b392024cdca42a3102
  • imagemagick-6.q16_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_arm64.deb
    sha:766b2d2ced29a1945105f669895aa57a8c9050c1
  • imagemagick-6.q16hdri_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_arm64.deb
    sha:4eb9a347349a93ad97ed0d78b3a28e2ee59e7bbb
  • libimage-magick-q16-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_arm64.deb
    sha:497a4121a104c1d00a273fc024b7bf3c07f798bf
  • libimage-magick-q16hdri-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_arm64.deb
    sha:71c078daa22e4dc5026a35619e07e34edb24c924
  • libmagick++-6.q16-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_arm64.deb
    sha:b90c3404a9bcf50d0707d657bc32fa11e7a1ae02
  • libmagick++-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_arm64.deb
    sha:6232656660b488ec2d647bc429f1ffc75cbf602a
  • libmagick++-6.q16hdri-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_arm64.deb
    sha:282465b392080ba56993c94237b4d7b18eb05316
  • libmagick++-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_arm64.deb
    sha:8326a4617d7ec26e014a08c92e99f52c0d4af7eb
  • libmagickcore-6-arch-config_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_arm64.deb
    sha:593222906743cf6ace8e97530bf692a5906ba081
  • libmagickcore-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_arm64.deb
    sha:c7d43a6de79f1fc13e3aae6168e69a363a215991
  • libmagickcore-6.q16-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_arm64.deb
    sha:7a93cf3e9813856ac39bc86acb1e10af449a4f60
  • libmagickcore-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_arm64.deb
    sha:030e6f65c91ee80925afda1fd8125f309e196353
  • libmagickcore-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_arm64.deb
    sha:340672e848a09ad833cad728e600d86c637e36be
  • libmagickcore-6.q16hdri-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_arm64.deb
    sha:7f560c87d771ade599b2a4da4246e38ab141e59f
  • libmagickcore-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_arm64.deb
    sha:07317c2d4fb0150e13df8ed0b26ab7fd3f1ef5ae
  • libmagickwand-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_arm64.deb
    sha:5b52c26853cda6ca03d4046e173126ea796c11be
  • libmagickwand-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_arm64.deb
    sha:c9b3f9f5fa5ef4c3c57e8ed320401fb8393d9b21
  • libmagickwand-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_arm64.deb
    sha:47717b85d987a1c7b324160c7a367c4db3ab7213
  • libmagickwand-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_arm64.deb
    sha:9f56324ff9ae260ba64c31666ab4b2e59d866be4
  • imagemagick_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_armel.deb
    sha:a14ecc8b2307528b4429e2dbf05069852bb8d7e2
  • imagemagick-6.q16_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_armel.deb
    sha:b5893957167a4eaf2d60c15bd975702783004dc1
  • imagemagick-6.q16hdri_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_armel.deb
    sha:651f49043734b7b386b2a129898b6cea571e83ad
  • libimage-magick-q16-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_armel.deb
    sha:0ce71110d46f81143f62b9bc536512c9d067a3bb
  • libimage-magick-q16hdri-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_armel.deb
    sha:8e74a8af6b21411335eafcb2697985c25e28574d
  • libmagick++-6.q16-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_armel.deb
    sha:33356ca9c48b9fcd97b479b5802f63aba45aec6c
  • libmagick++-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_armel.deb
    sha:1a181b70285c33fedc0fb24fa8cb5ac4a8f16307
  • libmagick++-6.q16hdri-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_armel.deb
    sha:e9de883b3443e8e2ddd3b64f705aa20284069ba1
  • libmagick++-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_armel.deb
    sha:d79e8ad2e513232911ebf56f3d300445d34637f4
  • libmagickcore-6-arch-config_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_armel.deb
    sha:4d048051096b1dd620f2cf9c5889ad8fb6087ab4
  • libmagickcore-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_armel.deb
    sha:f6429f740596a20e0354bd2666522ab007e80b52
  • libmagickcore-6.q16-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_armel.deb
    sha:f34d4276157dbd6a0dd039d9e5384ed0ed112f1c
  • libmagickcore-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_armel.deb
    sha:3b21a75822db873a21edd34553229d05e59c2f0f
  • libmagickcore-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_armel.deb
    sha:eaecf753ce04e299099f86dfcd3128699bb42863
  • libmagickcore-6.q16hdri-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_armel.deb
    sha:a53bf27ded06b9de39e3165e53b13e2a96908dae
  • libmagickcore-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_armel.deb
    sha:0f283f505290b3242f71ca4146aaf20982a4bdd0
  • libmagickwand-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_armel.deb
    sha:1442074487e14c60ea8034a983e34767c76a9d71
  • libmagickwand-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_armel.deb
    sha:d9c938b7159d0b7c0e9d6b016192ee72653c18c8
  • libmagickwand-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_armel.deb
    sha:acf645229fafd4bd761496ca5261b9857d38ac26
  • libmagickwand-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els19_armel.deb
    sha:58706f2db72447e3f1e2208b5e3fffbba887fef2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.