[CLSA-2026:1784736863] ImageMagick: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-07-23 22:37:19 UTC
Description:
- CVE-2026-61857: check ResizeQuantumMemory() return value in ParseEntities() (magick/xml-tree.c) to avoid a NULL-pointer dereference - CVE-2026-61863: destroy the huffman_image clone on temp-file open failure in WriteGROUP4Image() (coders/tiff.c) to fix a memory leak - CVE-2026-61870: relinquish pixel_info before throwing on colormap allocation failure in WriteVIFFImage() (coders/viff.c) to fix a memory leak
Updated packages:
  • ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els22.i686.rpm
    sha:62d5824ac45da8b5eff163a4d4cb36a89bfcbb30f11891738e17a93cffbc43f6
  • ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm
    sha:fac1d1206c3518cd3b49da86ebd50d6fc884e8d691adfb7ccba58d1ee917058b
  • ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els22.i686.rpm
    sha:fb78229344d119e6bc7044732f55c00011bc3b7d92b4e59cb0d11b9d87f6aeee
  • ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm
    sha:db4455433604b42e786ac77f1171ade8d94078d36f43e65d48e2025cd07dc355
  • ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els22.i686.rpm
    sha:6630b6e1fd2e0ddb686ffda08dbef27f9f0d0ee47456fb1b3e094f0a4992a0da
  • ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm
    sha:bf4b60e2fb4766d2e794b4415f0abdd389967c7d8b29303f986f5fb50039ee28
  • ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els22.i686.rpm
    sha:4a0da5d1c179f56d87b1b87a5a55c36c8bbd653b160f16da699f98fe87fbe6a8
  • ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm
    sha:04b93729920c97ec652297c2f781bd5b08e2789e7994539c941ee584ed228ff1
  • ImageMagick-doc-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm
    sha:60ea23e3ca65989a350607408d88cb95ee8fc5c0564a2d51f128c991f45038ec
  • ImageMagick-perl-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm
    sha:a34f7664875067e83cb208fae98f46d19368f06c66ba0a267baed261dcc56f6b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.