[CLSA-2026:1789398771] ImageMagick: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-14 15:13:08 UTC
Description:
- CVE-2026-86421: destroy the per-level draw_info clone when popping a in MSLEndElement() (coders/msl.c) to fix a memory leak - CVE-2026-86423: track already-seen images in a seen[] array in GetList() (PerlMagick) so a non-adjacent repeat is cloned, fixing a use-after-free
CVEs fixed:
Updated packages:
  • ImageMagick-6.9.10.68-7.0.11.el7_9.tuxcare.els2.i686.rpm
    sha:4c32ac2674e47330abf176eace4f7a50615252a9ba72a7c17eac3aedecbee46c
  • ImageMagick-6.9.10.68-7.0.11.el7_9.tuxcare.els2.x86_64.rpm
    sha:05110193e09387a10a6ed3c6352850d68b26561c32db612d838171fd90680d59
  • ImageMagick-c++-6.9.10.68-7.0.11.el7_9.tuxcare.els2.i686.rpm
    sha:de9369069c10843659e4b352e1b47bce618769e799f58ca0d436fdece7bff14e
  • ImageMagick-c++-6.9.10.68-7.0.11.el7_9.tuxcare.els2.x86_64.rpm
    sha:d3173f77d90417a4255be2f4857857722a992c94a405f1a0f543c9736d7631cd
  • ImageMagick-c++-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els2.i686.rpm
    sha:9d8c0808bd51c2f35c8f96d925c7028543261c041fc2979aa9223750a1446c4c
  • ImageMagick-c++-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els2.x86_64.rpm
    sha:f84516f0cc8fb439acdf1cc966c30968a3c6b150782002ff02865d11b8920498
  • ImageMagick-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els2.i686.rpm
    sha:18e3058513f4368d10643044d5e83a60885cd572fb1a84f6b6544af1e8bce953
  • ImageMagick-devel-6.9.10.68-7.0.11.el7_9.tuxcare.els2.x86_64.rpm
    sha:83f07d728a9f7bc10ea2a9caf59699a34617184ef0ae31c5a89255cac11e4479
  • ImageMagick-doc-6.9.10.68-7.0.11.el7_9.tuxcare.els2.x86_64.rpm
    sha:7b225994309c15a01a5b690240268f71ced623d6dbd403d6d215e25f686a73cd
  • ImageMagick-perl-6.9.10.68-7.0.11.el7_9.tuxcare.els2.x86_64.rpm
    sha:14d8fd2a324d06625122ca1966c28033275e33a1c326d404ca6ca20134ef7751
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.