[CLSA-2026:1793710329] Fix CVE(s): CVE-2026-56379, CVE-2026-61868, CVE-2026-61869
Type:
security
Severity:
Important
Release date:
2026-11-03 12:52:23 UTC
Description:
* SECURITY UPDATE: MVG command injection via the SVG decoder - debian/patches/CVE-2026-56379.patch: add SVGEscapeString() and escape attribute and style values before writing them to the MVG stream in SVGProcessStyleElement() and SVGStartElement(), and escape and content for the double quotes it is written between in SVGStartElement() and SVGEndElement() in coders/svg.c - CVE-2026-56379 * SECURITY UPDATE: memory leak in the YUV decoder - debian/patches/CVE-2026-61868.patch: relinquish scanline and destroy chroma_image on blob open failure in ReadYUVImage() in coders/yuv.c - CVE-2026-61868 * SECURITY UPDATE: memory leak in the MIFF encoder - debian/patches/CVE-2026-61869.patch: destroy quantum_info before throwing on pixel and colormap allocation failure in WriteMIFFImage() in coders/miff.c - CVE-2026-61869 * SECURITY UPDATE: Additional fix for CVE-2026-106568: unbounded XML entity expansion via nested parameter entities - debian/patches/CVE-2026-106568-2.patch: refuse entity expansions longer than the "system:max-profile-size" policy (16MiB by default) in ParseEntities() in magick/xml-tree.c, add GetMaxProfileSize() to magick/memory.c and set max-profile-size in config/policy.xml - CVE-2026-106568
CVEs fixed:
Updated packages:
  • imagemagick_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_amd64.deb
    sha:f0d5f9c22f6466beea78d7877964aa1781cb44c8
  • imagemagick-6-common_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_all.deb
    sha:20630ace40e6a6594996530e3e6a3d2506d96725
  • imagemagick-6-doc_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_all.deb
    sha:13e5243950e83017afa5f9a8f938e5d10020cd7a
  • imagemagick-6.q16_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_amd64.deb
    sha:0a0e4803ff84746c5baa100378ab11b1b9ed29e0
  • imagemagick-6.q16hdri_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_amd64.deb
    sha:959875992872e4b64f0e51c719c128a5fec8b655
  • imagemagick-common_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_all.deb
    sha:fd24f3711b29d5d73425866cfc1c0eec98b7a0b5
  • imagemagick-doc_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_all.deb
    sha:f25712ff5d1d1fbe488c1a07c24cf12ac6415ca4
  • libimage-magick-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_all.deb
    sha:188b9f0c05cf39eb865eaebe048cd88fd6483c6a
  • libimage-magick-q16-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_amd64.deb
    sha:d6f07812c6a88324e86b67fd20387b57eec042de
  • libimage-magick-q16hdri-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_amd64.deb
    sha:803a1c3c7bb5c91c59279a18a14a628734b26e50
  • libmagick++-6-headers_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_all.deb
    sha:24bfde8000ce78461a4d7990f492aab40fa8e366
  • libmagick++-6.q16-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_amd64.deb
    sha:b1cfbbe5f7006a1b3c90ba059c6e6f62fc634651
  • libmagick++-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_amd64.deb
    sha:18248c21c5d7a51f5f40492b6bd834df6f7f9b86
  • libmagick++-6.q16hdri-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_amd64.deb
    sha:8d966690319fad26e50a62dfd96006ff88bdf137
  • libmagick++-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_amd64.deb
    sha:8bb0db0825c30124fd51a1d3dcf8f5e36730b0c0
  • libmagick++-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_all.deb
    sha:c3fb2e1f10eceb6642e92c0c8af177d2b1173d82
  • libmagickcore-6-arch-config_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_amd64.deb
    sha:8424a85ac18303fe5aa2b127658fac21bfd6f847
  • libmagickcore-6-headers_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_all.deb
    sha:646fe0f6df76496669bfe8eb4be524fb19f793bb
  • libmagickcore-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_amd64.deb
    sha:8d7aa03dfe8a64ede9e0b57b43f2ee7cbf2b43e8
  • libmagickcore-6.q16-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_amd64.deb
    sha:9a545acfc53806e15920d3c7f097b77fee8b0f5c
  • libmagickcore-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_amd64.deb
    sha:5a86610c5d407a2ab8a623438315c7c9a65f053b
  • libmagickcore-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_amd64.deb
    sha:da287087578ab65854b34165042dd5b6b65182e8
  • libmagickcore-6.q16hdri-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_amd64.deb
    sha:6ab9b8c4f89a921006052e015e34b5badd7af563
  • libmagickcore-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_amd64.deb
    sha:3a691956a3316e55b1aacb96893cd4ad0d19796c
  • libmagickcore-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_all.deb
    sha:6a76bcabc9cb981882bd737ec603982d28af2bb0
  • libmagickwand-6-headers_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_all.deb
    sha:aa014a1811a9c19140304c35e1a42927dbb3aec3
  • libmagickwand-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_amd64.deb
    sha:fb701025a1e11f386e65a9cbd53205bbf1f2ec18
  • libmagickwand-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_amd64.deb
    sha:b5a7773311962022bdc7d090cccd644315661768
  • libmagickwand-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_amd64.deb
    sha:0a1b494676184fb2eb6583a60319caf72f29ca5e
  • libmagickwand-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_amd64.deb
    sha:66390cb45a3af8ab25b4a172ef6410139ffae3de
  • libmagickwand-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_all.deb
    sha:92186587597ead1a14da2c2f039f3e5c700eaae6
  • perlmagick_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_all.deb
    sha:4e13155e33a0693c47ed74508bacf646f40937c2
  • imagemagick_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_arm64.deb
    sha:149a8a584bf5b04d86b52841df84d6d5a9361936
  • imagemagick-6.q16_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_arm64.deb
    sha:910e9f27c314fbc051d2c4387a5d4d46222e4f59
  • imagemagick-6.q16hdri_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_arm64.deb
    sha:d7807bd663c7d8f1676602b34a58d6ada7101bfc
  • libimage-magick-q16-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_arm64.deb
    sha:cde05c3f4ad1897a043c5d8760c7610fead2ef86
  • libimage-magick-q16hdri-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_arm64.deb
    sha:01e7821495f3951ea1b17297e890b171f7a8bfac
  • libmagick++-6.q16-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_arm64.deb
    sha:5607703a422f6780223e782bec1a8ef7ff84ab25
  • libmagick++-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_arm64.deb
    sha:e2153149b49c4cae2257cc7fcd234bfd0c48a0ae
  • libmagick++-6.q16hdri-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_arm64.deb
    sha:ebddc2ebcca6d97a2d9f009208dd556a5103afab
  • libmagick++-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_arm64.deb
    sha:3d6da6559d2e0595616e90dfe975e98e0f929301
  • libmagickcore-6-arch-config_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_arm64.deb
    sha:cdfa622383672ce34e6e65a8cdb8c1ead5591cc7
  • libmagickcore-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_arm64.deb
    sha:44d8990635bc6c006a03397e0ac0f9811321e3c4
  • libmagickcore-6.q16-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_arm64.deb
    sha:09d4c0b0688ccbd706b1035ee3274ac813285b3e
  • libmagickcore-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_arm64.deb
    sha:67cf751e45ad8b37244c01e8c8b6fcf49bd84273
  • libmagickcore-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_arm64.deb
    sha:6cec4031ec2775d721e81224104e23d8bc83bd32
  • libmagickcore-6.q16hdri-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_arm64.deb
    sha:e17f88ab2665fff920b4861bc772427661698ed2
  • libmagickcore-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_arm64.deb
    sha:dd98693abf2a22fc5477740a84a603fd8a4bee8d
  • libmagickwand-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_arm64.deb
    sha:f1bfd8a28678a54b81a3bc7e0c3aae43a78713fc
  • libmagickwand-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_arm64.deb
    sha:d78d353e8232ad2af8479bdcbf7d0b7d7d257350
  • libmagickwand-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_arm64.deb
    sha:ad87b440499166a292e493c2a8481f7c53b17146
  • libmagickwand-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_arm64.deb
    sha:12fc1e86d4660c448d7e3c9ad23c356ada60bfe0
  • imagemagick_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_armel.deb
    sha:dcef368c7818270776c38ebff2806c905f1fd99a
  • imagemagick-6.q16_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_armel.deb
    sha:3c26de16e865ff0b1aeba13c0949e1fa7af896d4
  • imagemagick-6.q16hdri_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_armel.deb
    sha:21c87d74179fdc4ccba1382957a531c9adc432f0
  • libimage-magick-q16-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_armel.deb
    sha:4dd8f29c479784e924c99f5e957f724eb544f925
  • libimage-magick-q16hdri-perl_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_armel.deb
    sha:b41b9f1cbbea62f819d5b6bd8ae6445deb78136b
  • libmagick++-6.q16-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_armel.deb
    sha:e7ecf0d88375c588e888a0bc490cd754cb440a6a
  • libmagick++-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_armel.deb
    sha:e2fc6ecd74df87fb2bcfcffb5167a5c9ce4d429a
  • libmagick++-6.q16hdri-8_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_armel.deb
    sha:5cfee5fac3eca1fc318ae19d4ee92e5d4f1ec3da
  • libmagick++-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_armel.deb
    sha:4d2b3e3986c9b2c895600167a14068ae9be5cf3e
  • libmagickcore-6-arch-config_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_armel.deb
    sha:40aac5e9285b3ad699da267b0d7cfa2e4c566bfb
  • libmagickcore-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_armel.deb
    sha:85f714654372ede4337cdcb33b3432405f7dd625
  • libmagickcore-6.q16-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_armel.deb
    sha:ae6b13a39b744749454265546a3b5adfdffe1c5a
  • libmagickcore-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_armel.deb
    sha:b2d8fd8af0b2036ae032d001a12e1d4349fdf209
  • libmagickcore-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_armel.deb
    sha:5e73d5560f4f5270375b329627ad200e3c6322b1
  • libmagickcore-6.q16hdri-6-extra_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_armel.deb
    sha:933a9d5c4e1897c2df9d70b3717b6e0a875f8525
  • libmagickcore-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_armel.deb
    sha:7987cc5b3b41e1eabe11b2d4a207299a4392633a
  • libmagickwand-6.q16-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_armel.deb
    sha:f3eb79411a0c3c5453bbbfc80ef4ef66285b84f9
  • libmagickwand-6.q16-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_armel.deb
    sha:62a78541fc45f63ab5fba03792b955122f5fa54a
  • libmagickwand-6.q16hdri-6_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_armel.deb
    sha:d1f439eb9efa35106afd4cb37991451c4c8e6b35
  • libmagickwand-6.q16hdri-dev_6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els24_armel.deb
    sha:8b4039a941238502a289d9203c1b48c6bbc2fb4c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.