Release date:
2026-07-16 12:14:13 UTC
Description:
- CVE-2026-61857: heap use-after-free in the XML entity parser
(magick/xml-tree.c ParseEntities) via a crafted XMP profile; add a NULL
check on the ResizeQuantumMemory return before it is dereferenced
- CVE-2026-61870: memory leak of the pixel virtual-memory buffer in the VIFF
encoder (coders/viff.c WriteVIFFImage) when the colormap allocation fails
Updated packages:
-
ImageMagick-6.9.10.97-1.amzn2.0.30.tuxcare.els5.i686.rpm
sha:b1fb855b6bb3d86eb2dc76fab51587b5c42e1794f1645851d7479e4bc8448d50
-
ImageMagick-6.9.10.97-1.amzn2.0.30.tuxcare.els5.x86_64.rpm
sha:9b944415fe1b00b9a73dd11ce0d67c4981bf0dbcb897aaef8ea30a435e7585b6
-
ImageMagick-c++-6.9.10.97-1.amzn2.0.30.tuxcare.els5.i686.rpm
sha:f2775763dfb251db3d07bf22b96c9d0605234d604fc79bafa6ad59098f931040
-
ImageMagick-c++-6.9.10.97-1.amzn2.0.30.tuxcare.els5.x86_64.rpm
sha:f85c5621d9a400f0c0d116b3c8969946432baba95b0b485db04a4279861c9ec9
-
ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.30.tuxcare.els5.x86_64.rpm
sha:71ae5ef81327d712e20147ef5dd65e7fd6986f213f529dada8e4c5a5ae3beec5
-
ImageMagick-devel-6.9.10.97-1.amzn2.0.30.tuxcare.els5.x86_64.rpm
sha:9978bd76224c428cc8dab83aa564f0f6654373cdb2a85363d5e880074a417228
-
ImageMagick-doc-6.9.10.97-1.amzn2.0.30.tuxcare.els5.x86_64.rpm
sha:d6f74d54892ef04c548686bd8f3f5192f9242cf2d786fe489f532fea603984ae
-
ImageMagick-perl-6.9.10.97-1.amzn2.0.30.tuxcare.els5.x86_64.rpm
sha:e77743b1e8402730764ad94007b7d408c2d0120d766427257d36ac0e0732db85
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
