[CLSA-2026:1777976295] Fix CVE(s): CVE-2026-28690
Type:
security
Severity:
Important
Release date:
2026-05-05 10:18:21 UTC
Description:
* SECURITY UPDATE: stack buffer overflow in MNG/JNG encoder — missing NULL check after ImageToBlob() in WriteOneJNGImage could propagate a NULL blob pointer into later stack buffer operations (GHSA-7h7q-j33q-hvpf). - debian/patches/CVE-2026-28690.patch: bail out of WriteOneJNGImage when ImageToBlob() returns NULL, destroying jpeg_image and jpeg_image_info before returning MagickFalse (upstream e6e874875e48dd9838acca3bd22c14a4d2f1b3ca) - CVE-2026-28690
Updated packages:
  • imagemagick_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_amd64.deb
    sha:2807dee6071cc56c9825c91b34e09bf2967d5477
  • imagemagick-6-common_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_all.deb
    sha:12298be5864b02ed3dffc27f7895f3864389dc70
  • imagemagick-6-doc_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_all.deb
    sha:d20f447d0e5f16406c55f27b3c09955065c17a23
  • imagemagick-6.q16_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_amd64.deb
    sha:ee8ca8fb0051aea089e3702e4a3728e62b57b1ce
  • imagemagick-6.q16hdri_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_amd64.deb
    sha:0315a230e4bc2b22dab2f5ff5295660a9ec0701f
  • imagemagick-common_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_all.deb
    sha:033c2556b1acb410b270b5417d7f8a9bc5b77b45
  • imagemagick-doc_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_all.deb
    sha:8c0d2f7c60b455eae705aa4a31333b18f0df1d12
  • libimage-magick-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_all.deb
    sha:2730e684b6dfc906e866dd59379aa466b3054461
  • libimage-magick-q16-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_amd64.deb
    sha:bcc1e168059d84bd310d7cb07fcce174a5887540
  • libimage-magick-q16hdri-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_amd64.deb
    sha:3c037b6592ef499813fc75377ef8b9bd1fd745ce
  • libmagick++-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_all.deb
    sha:23b8dbecbebbf7ffd4d2e80ef5fe6e735c078b67
  • libmagick++-6.q16-7_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_amd64.deb
    sha:215ef08572908a226805f99917fc3d1deaffe94f
  • libmagick++-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_amd64.deb
    sha:c68f603091c2004ed9aaa4fd15cb0cd9cd026f23
  • libmagick++-6.q16hdri-7_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_amd64.deb
    sha:1b6f2332ae605558722089fefb3b64029eaf3120
  • libmagick++-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_amd64.deb
    sha:391c85bc96d37929da3bd39bf65b6d29ea5d5667
  • libmagick++-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_all.deb
    sha:038419cdabbd89cd523b34af2104fdff7d0e387b
  • libmagickcore-6-arch-config_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_amd64.deb
    sha:6ec0f0df1d5c023f1c134dcc664204e4df176680
  • libmagickcore-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_all.deb
    sha:905d997bf4ad789b7fb6856639fa82d36237194a
  • libmagickcore-6.q16-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_amd64.deb
    sha:398dc0be41908d29bcf9f93a2096f0470ccf9d27
  • libmagickcore-6.q16-3-extra_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_amd64.deb
    sha:46ec39b8cde9e344dbd62a9589856cd5bb54bb93
  • libmagickcore-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_amd64.deb
    sha:8710d7e33b04086891b96644cdeb225f640da34d
  • libmagickcore-6.q16hdri-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_amd64.deb
    sha:0ca87edd9a565e612a7dd81c03c530ccb3f8d627
  • libmagickcore-6.q16hdri-3-extra_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_amd64.deb
    sha:0f662deacd8321875c19be18239855384835caee
  • libmagickcore-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_amd64.deb
    sha:997465e59631a08214d01d8b5bfd2c7892e83d6d
  • libmagickcore-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_all.deb
    sha:6a771403da26ba839061e80f1253e7de36c8dade
  • libmagickwand-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_all.deb
    sha:a6049b8cabf38a1a91da4bdbd8b2b1cb3dd90c60
  • libmagickwand-6.q16-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_amd64.deb
    sha:8844e56f55bdb7e18e4bb1afa4e5e37f6b130a66
  • libmagickwand-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_amd64.deb
    sha:fc03b5fd8bd9fb9e2050b5dae495d03224e92ec9
  • libmagickwand-6.q16hdri-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_amd64.deb
    sha:2efdee9b7fbde9c183bb7306d9e3fe4b8b91ab37
  • libmagickwand-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_amd64.deb
    sha:52e443fca9ffdbaa368a6c314c04c05923e08c58
  • libmagickwand-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_all.deb
    sha:1a663a9088ec0da1160a113c20c2a7514a4dd369
  • perlmagick_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els34_all.deb
    sha:9611bab603cadce6e9a4a21513051d21398972b0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.