[CLSA-2026:1784738439] ImageMagick: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-07-22 16:41:10 UTC
Description:
- CVE-2026-61857: check ResizeQuantumMemory() return value in ParseEntities() (magick/xml-tree.c) to avoid a NULL-pointer dereference - CVE-2026-61863: destroy the huffman_image clone on temp-file open failure in WriteGROUP4Image() (coders/tiff.c) to fix a memory leak - CVE-2026-61870: relinquish pixel_info before throwing on colormap allocation failure in WriteVIFFImage() (coders/viff.c) to fix a memory leak
Updated packages:
  • ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els22.i686.rpm
    sha:faa0b3368b04c44534dc181bb0e5d9f25f5a3b8917c09ff9db87e62d3ba5dfd9
  • ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm
    sha:a4ef20eeab3a1f9f263048f93d5deb7419e7edd641b35844ac9636c52313c651
  • ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els22.i686.rpm
    sha:288350aed7b41524014f057089018c7c7ca90f1c599573e3c25b2b31124f6ab6
  • ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm
    sha:230bbba942407202e25d1ec7e2f7f853d95802233020ff33bf797e8266606797
  • ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els22.i686.rpm
    sha:85d69262355d0239f1d049f45434ff740e3b1f5a913b299fa0f70e67ba5e9251
  • ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm
    sha:627b5b68ceede80da57b75ea7732134a93c5974c9a8965ce84c34ea219046b95
  • ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els22.i686.rpm
    sha:cc1b720cbd7c552ff02a426240d9b1d95993f35b0b12020d903192659c4724a5
  • ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm
    sha:1bf81dd4f46383f28616a5b81516d58b9185b7f910290e752c45bc9fa41ec0c5
  • ImageMagick-doc-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm
    sha:fd00f81262db6b19e420e194206d110cf7b7da0129709497bb2072e7ecb44a2d
  • ImageMagick-perl-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm
    sha:eb346d539f44c0c0596b69f0a9b2677e472b9d98d3c31676145650173bdd34ca
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.