[CLSA-2026:1789464087] ImageMagick: Fix of CVE-2026-86420
Type:
security
Severity:
Important
Release date:
2026-09-16 23:29:54 UTC
Description:
- CVE-2026-86420: release the memory-resource budget in OpenPixelCache() (magick/cache.c) when the pixel allocation fails and the cache falls back to the source pixels, so repeated allocation failures cannot exhaust the process memory budget
CVEs fixed:
Updated packages:
  • ImageMagick-6.9.10.68-7.0.11.el7_9.tuxcare.els3.i686.rpm
    sha:461b6011125050c582f8c1184ba7ffbe4bb5b7d22cf5787d9476492aeb413b3c
  • ImageMagick-6.9.10.68-7.0.11.el7_9.tuxcare.els3.x86_64.rpm
    sha:f4d4a46684a301901a560ee57f987c8f53053ba4c4f8140c37fcff0c8180b22c
  • ImageMagick-c++-6.9.10.68-7.0.11.el7_9.tuxcare.els3.i686.rpm
    sha:c64c59f1982dcc423191e081bfc820d9c4d8b2341a6ff882420b6afd23de3897
  • ImageMagick-c++-6.9.10.68-7.0.11.el7_9.tuxcare.els3.x86_64.rpm
    sha:4add3a676b5f91d96d70974c3ff36bb632062feff2a8c454e3fc3884156bd06c
  • ImageMagick-c++-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els3.i686.rpm
    sha:9b14b547027152f1f6d7935c6078f32831f9f02b5f6bf17ed659d5819fb22309
  • ImageMagick-c++-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els3.x86_64.rpm
    sha:9aef084955ea3665c4a4668446c0f2fd499a29f2aad416c38894e0db5e7c1d72
  • ImageMagick-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els3.i686.rpm
    sha:6f4559f454fe3b10da83f9586542f2ee8cbbff37da03c65b5400c8feecb094f0
  • ImageMagick-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els3.x86_64.rpm
    sha:5ed0c78b0fdf84ec30a7fe5fa8297446b33ecb78cfed3a666ae73094fc424e5e
  • ImageMagick-doc-6.9.10.68-7.0.11.el7_9.tuxcare.els3.x86_64.rpm
    sha:aa12bf89bc931d22896001721ff661a4012a95879eca10978935bc611e1d54d1
  • ImageMagick-perl-6.9.10.68-7.0.11.el7_9.tuxcare.els3.x86_64.rpm
    sha:74eacc7af5f2ead06c2c5aaa689c1d1eb643d4e330e7e1aac023f6fac66cbfd4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.