[CLSA-2026:1789375039] ImageMagick: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-14 08:37:30 UTC
Description:
- CVE-2026-86420: release the MemoryResource reservation in OpenPixelCache() when the pixel-cache allocation fails, so repeated failures no longer exhaust the memory budget - CVE-2026-86421: destroy the group level's draw_info in MSLEndElement() when a element closes, fixing a DrawInfo leak in the MSL decoder
Updated packages:
  • ImageMagick-6.9.10.97-1.amzn2.0.31.tuxcare.els3.i686.rpm
    sha:18ea5e29f1df72111111ae2764dfbd38f9a006db66d091a85cdc1918c94c108d
  • ImageMagick-6.9.10.97-1.amzn2.0.31.tuxcare.els3.x86_64.rpm
    sha:85607b1870dee51f2a6270add15c50bb248996ed27be4b7a919630e7880e3024
  • ImageMagick-c++-6.9.10.97-1.amzn2.0.31.tuxcare.els3.i686.rpm
    sha:bda28d438eb1406adfbf6449902204d45d956901445d54c06bbc6e4c9b732bc2
  • ImageMagick-c++-6.9.10.97-1.amzn2.0.31.tuxcare.els3.x86_64.rpm
    sha:328d85d335f5c6a3ad8b853c24b8f37d323f0dc289dccdb05519bd3433f8476c
  • ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.31.tuxcare.els3.x86_64.rpm
    sha:a724ef9cac0216b4cbfecb2ef110eca64ae130def3b44344f2dff851b7630692
  • ImageMagick-devel-6.9.10.97-1.amzn2.0.31.tuxcare.els3.x86_64.rpm
    sha:13485520845ff56ec8facdc85bbca02ffc62b39fbafff0440858112f84b06fbc
  • ImageMagick-doc-6.9.10.97-1.amzn2.0.31.tuxcare.els3.x86_64.rpm
    sha:ae71f80a790806fad21d6c9d21934189011f8019386ce2e888364b44d402c1fb
  • ImageMagick-perl-6.9.10.97-1.amzn2.0.31.tuxcare.els3.x86_64.rpm
    sha:7c516d69b3d197b0d46d98260c4fb4d5d304c51c5a421d5472342f5b05a57cf4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.